CVE-2022-3912

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-391205.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391215.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391225.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391235.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391245.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391255.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391265.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391275.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391285.5In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneCVE-2022-391295.5In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in CVE-2022-39135.3Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates.CVE-2022-391305.5In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in
CVE-2022-3912: High severity, CVSS 7.5 | Vulnix