NetSight
high7.2

CVE-2022-1939

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP f…

Impact

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to

Affected products

VendorProductAffected versions
Allow Svg Files ProjectAllow Svg Files
before 1.1

Weakness classification

References