CVE-2022-0687

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Mar 21, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-06884.9Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.CVE-2022-06895.3Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.CVE-2022-06906.1Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.CVE-2022-06919.8Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.CVE-2022-06926.1Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.CVE-2022-06939.8The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX CVE-2022-06949.8The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL sta CVE-2022-06955.5Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-06965.5NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.CVE-2022-06976.1Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.CVE-2022-06986.1Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.CVE-2022-06999.8A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial