Monitor free

Report

New Known

Verified

Exploited

Not fixed

WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

7.2

CVSS 3.1 score High severity

Report

Monitoring Monitoring Known to be exploited Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Enable SVG, WebP & ICO Upload

Type

Plugin

Vulnerable versions

<= 1.0.1

Fixed in

N/A

PSID

9e1794b8627d

CVE ID

CVE-2022-34154

Classification

Arbitrary File Upload

OWASP Top 10

A1: Injection

Required privilege

Requires author or higher role user authentication.

Credits

Kim Jong Min aka Universe (Patchstack Alliance)

Publicly disclosed

2022-08-01

Patchstack vPatch available since

09.12.2021

Details

Authenticated Arbitrary File Upload vulnerability discovered by Kim Jong Min aka Universe (Patchstack Alliance) in WordPress Enable SVG, WebP & ICO Upload plugin (versions <= 1.0.1).

Solution

No patched version available.

References