CVE-2022-0863: Wp Svg Icons Project Wp Svg Icons

High severity, CVSS 7.2. EPSS: 23.8% chance of exploitation in the next 30 days.

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

Affected products

• Wp Svg Icons Project Wp Svg Icons: up to and including 3.2.3

Published 2022-06-13. Last modified 2026-06-17.