WordPress Plugin Vulnerabilities

SEO Plugin by Squirrly SEO < 12.1.11 - Contributor+ Arbitrary File Upload

Description

The plugin does not validate files to be uploaded, which could allow users with a role as low as contributor to upload arbitrary files such as PHP

Affects Plugins

Plugin icon
squirrly-seo
Fixed in 12.1.11

References

CVE
CVE-2022-38140

Miscellaneous

Original Researcher
Yeraisci
Verified
No
WPVDB ID
e2255b66-d949-4175-9d53-074672c67887

Timeline

Publicly Published
2022-11-28 (about 3 years ago)
Added
2022-11-28 (about 3 years ago)
Last Updated
2022-11-28 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
Image News Slider - Arbitrary File Upload
Published
2024-10-24
Title
SurveyJS: Drag & Drop WordPress Form Builder < 1.12.4 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
VideoWhisper Video Conference Integration 4.51 - Arbitrary File Upload
Published
2024-07-08
Title
Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload
Published
2014-09-28
Title
N-Media File Uploader < 3.5 Arbitrary File Upload