Read the docs

Wp Svg Icons Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Wp Svg Icons Project records in CISA KEV

No Wp Svg Icons Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority MEDIUM 52

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23797 Published 2022-06-13 No fix listed CWE-434
Open these records in search →