Vulnerabilities > CVE-2022-0863 - Unspecified vulnerability in WP SVG Icons Project WP SVG Icons

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wp-svg-icons-project

NVD

Published: 2022-06-13

Updated: 2024-11-21

Summary

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

Vulnerable Configurations

Part	Description	Count
Application	Wp_Svg_Icons_Project WP SVG Icons Project WP SVG Icons 1.0 WP SVG Icons Project WP SVG Icons 1.1 WP SVG Icons Project WP SVG Icons 1.2 WP SVG Icons Project WP SVG Icons 1.3 WP SVG Icons Project WP SVG Icons 1.3.1 WP SVG Icons Project WP SVG Icons 1.3.2 WP SVG Icons Project WP SVG Icons 2.0 WP SVG Icons Project WP SVG Icons 2.2 WP SVG Icons Project WP SVG Icons 2.2.1 WP SVG Icons Project WP SVG Icons 2.3 WP SVG Icons Project WP SVG Icons 2.3.1 WP SVG Icons Project WP SVG Icons 2.3.2 WP SVG Icons Project WP SVG Icons 2.3.3 WP SVG Icons Project WP SVG Icons 3.0 WP SVG Icons Project WP SVG Icons 3.1 WP SVG Icons Project WP SVG Icons 3.1.1 WP SVG Icons Project WP SVG Icons 3.1.2 WP SVG Icons Project WP SVG Icons 3.1.3 WP SVG Icons Project WP SVG Icons 3.1.4 WP SVG Icons Project WP SVG Icons 3.1.5 WP SVG Icons Project WP SVG Icons 3.1.6 WP SVG Icons Project WP SVG Icons 3.1.7 WP SVG Icons Project WP SVG Icons 3.1.8 WP SVG Icons Project WP SVG Icons 3.1.8.1 WP SVG Icons Project WP SVG Icons 3.1.8.2 WP SVG Icons Project WP SVG Icons 3.1.8.3 WP SVG Icons Project WP SVG Icons 3.1.8.4 WP SVG Icons Project WP SVG Icons 3.2.0 WP SVG Icons Project WP SVG Icons 3.2.1 WP SVG Icons Project WP SVG Icons 3.2.2 WP SVG Icons Project WP SVG Icons 3.2.3	31

Summary

Vulnerable Configurations

References