CVE-2022-34154: WordPress Enable SVG, WebP & ICO Upload…

Record summary

CVE-2022-34154 has a selected CVSS score of 7.2 (high).

Description

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV: Listed · Aug 1, 2022 · VulnCheck
Reported exploitation: Observed · VulnCheck

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Enable SVG, WebP & ICO Upload (WordPress plugin) Browse ideasToCode / Enable SVG, WebP & ICO Upload (WordPress plugin)	CVE List	<= 1.0.1 to ≤ 1.0.1	affected
Enable SVG, WebP, and ICO Upload Browse ideastocode / Enable SVG, WebP, and ICO Upload	VulnCheck	Version data not supplied

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2022-34154

patchstack.comConfirmation

https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-arbitrary-file-upload-vulnerability

wordpress.orgConfirmation

https://wordpress.org/plugins/enable-svg-webp-ico-upload