CVE-2022-1103

ALTO 8.8CVE-2022-1103 · Published 16/05/2022 · updated 17/06/2026

In breve

CVE-2022-1103 è una vulnerabilità ALTO (CVSS 8.8) che riguarda advanced uploader (advanced uploader project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 15.6%, superiore al 96.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
advanced uploader advanced_uploader_project	`≤ 4.2`	No fix yet

Description

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

References

wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free