← Database

CVE-2022-0863

HIGH CVSS: 7.2 Published: 2022-06-13 Modified: 2026-06-17

Description

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

Affected Platforms

Wp Svg Icons Project Wp Svg Icons

Weakness Type

CWE-434, CWE-434

References