Adsanityplugin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Adsanityplugin records in CISA KEV

No Adsanityplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Adsanity 1 record MEDIUM

Records

1 record in Adsanity · all components

TI-2022-04539 CVE-2022-4949 · GHSA-v85g-h95p-h44c

AdSanity < 1.8.2 - Authenticated Arbitrary File Upload

MEDIUM 42

The AdSanity plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ajax_upload' function in versions up to, and including, 1.8.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02178 Published 2023-06-07 Fixed in 1.8.2 CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0