What’s Vulnerable › Vulnerabilities

CVE-2022-1103: Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-16 · updated 2026-06-17
• Weakness: CWE-434

Description

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

Affected products

• Advanced uploader: through 4.2

References

• https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18
• https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18

Get alerted when CVE-2022-1103 or the next vulnerability affects your stack