AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-1977

HIGH · CVSS 7.2 EPSS 1.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-27 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.2. It affects WordPress.

CVE
CVE-2022-1977
Severity
HIGH
CVSS
7.2
EPSS
1.29%
WordPress

Original NVD Description

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks

Related CVEs

Other vulnerabilities affecting the same vendor(s)