Skip to content
OpenAdvisories
High · 7.2 CVE-2022-36285 EUVD-2022-39002GHSA-m4f7-3v98-hpxx

WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: dmitrylitvinov Product: Uploading SVG, WEBP and ICO files (WordPress plugin) Category: Web / CMS

Description

Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress.

Affected products

VendorProductAffectedFixed
dmitrylitvinov Uploading SVG, WEBP and ICO files (WordPress plugin) <= 1.0.1 – ≤ 1.0.1 —

References