dmitrylitvinov

Products

ProductCVEsExploitedLatest
Uploading SVG, WEBP and ICO files (WordPress plugin)2–Aug 23, 2022

Exploited and recent CVEs

  • CVE-2022-36285 High 7.2 WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability 1.2%
  • CVE-2022-34648 Medium 4.8 WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%