AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-2711

HIGH · CVSS 7.2 EPSS 3.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-2711
Severity
HIGH
CVSS
7.2
EPSS
3.21%
WordPress

Original NVD Description

The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a path traversal vector.