CVE-2022-1103: vulnerability in Advanced uploader
Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weaponsame day
Published on NVDMay 16
1st PoCMay 11
The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
Affected products
Unknown · Advanced uploaderpublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/50895unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.