high8.8Public exploit code
CVE-2022-1103
The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to R…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)2022-05-11 · webapps · php
Impact
The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advanced Uploader Project | Advanced Uploader | through 4.2 |