.. / CVE-2022-1574

• File Upload
• Nuclei
• Web

Exploit for WordPress HTML2WP <=1.0.0 - Arbitrary File Upload (CVE-2022-1574)

Description:

WordPress HTML2WP plugin through 1.0.0 contains an arbitrary file upload vulnerability. The plugin does not perform authorization and CSRF checks when importing files and does not validate them. As a result, an attacker can upload arbitrary files on the remote server.

Nuclei Template

View the template here CVE-2022-1574.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1574.yaml

References: