title: WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
description: The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
product: WP SVG Icons
vendor: Unknown
versions:
lessThanOrEqual: 3.2.3, status: affected, version: 3.2.3, versionType: custom
}