Security Advisory

CVE-2022-0863

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-06-13 12:41:37

Last updated 2024-08-02 23:40:04

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

← Browse all CVEs View on cve.org ↗