Aller au contenu
Se connecter
7.2 Élevée

CVE-2022-3416 The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege…

Description

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Produits et versions touchés

Produit Versions touchées Corrigé en
WPtouch 4.3 premières → < 4.3.45 4.3.45

Autres CVE de WPtouch

Les 2 CVE de WPtouch →
CVE-2022-3417 The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to… 8.8 Élevée
Suivre cette CVE