The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files (such as PHP), leading to RCE
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2022-05-02T16:05:55
Updated: 2024-08-02T23:55:24.599Z
Reserved: 2022-04-08T00:00:00
Link: CVE-2022-1273
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-05-02T16:15:09.017
Modified: 2022-05-10T19:17:22.510
Link: CVE-2022-1273
Redhat
No data.