Advanced Uploader Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Advanced Uploader Project records in CISA KEV

No Advanced Uploader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Uploader 1 record MEDIUM

Records

1 record in Advanced Uploader · all components

TI-2022-00998 CVE-2022-1103 · GHSA-9g2p-9983-m65g

Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

MEDIUM 54

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.15553 Published 2022-05-16 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0