← CVE Intelligence

CVE-2022-3912

User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload PUBLISHED

Description (CNA)

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

Affected (CNA)

Vendor / productVersions
Unknown / User Registrationaffected 0 before 2.2.4.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.