CVE-2022-3416
Assigner: WPScan
Published: 2023-01-09T22:13:28.101Z
State: PUBLISHED
title: WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
problemTypes: descriptions: description: CWE-434 Unrestricted Upload of File with Dangerous Type
type: CWE
affected: vendor: Unknown
product: WPtouch
versions: status: affected
versionType: custom
version: 0
lessThan: 4.3.45
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)
credits: value: Nguyen Duy Quoc Khanh
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator