Wp Svg Icons Project

Wp Svg Icons

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2022-0863

Exploit
  • EPSS 23.01%
  • Published 13.06.2022 13:15:10
  • Last modified 21.11.2024 06:39:33

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

8.8

CVE-2019-14216

Exploit
  • EPSS 0.3%
  • Published 14.08.2019 21:15:13
  • Last modified 21.11.2024 04:26:13

An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file.