High severity8.8NVD Advisory· Published Mar 21, 2022· Updated Jun 17, 2026
CVE-2022-0687
CVE-2022-0687
Description
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Ameliadescription
- Range: <1.0.47
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/3cf05815-9b74-4491-a935-d69a0834146cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.