CVE-2022-1103: Advanced Uploader Project Advanced Uploader

High severity, CVSS 8.8. EPSS: 15.6% chance of exploitation in the next 30 days.

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

Affected products

• Advanced Uploader Project Advanced Uploader: up to and including 4.2

Published 2022-05-16. Last modified 2026-06-17.