Approved changes feed: RSS · Atom

cpe:2.3:a:allow_svg_files_project:allow_svg_files:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAllow Svg Files Project (8ef5a9ee-29b5-5d9c-9914-84f9b54409a4)
ProductAllow Svg Files (3d05b862-00b3-5ee1-be0f-88caa94e49de)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1939 vulnerable 2026-06-08 05:39:14.251913 Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload
The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to
Published: 2022-06-20T10:26:20.000Z
Updated: 2024-08-03T00:24:42.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.