High severity7.2NVD Advisory· Published May 2, 2022· Updated Jun 17, 2026

CVE-2022-1273

Description

The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files (such as PHP), leading to RCE

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Importwpllm-create
Range: <2.4.6
Importwp/Import Wp
cpe:2.3:a:importwp:import_wp:*:*:*:*:*:wordpress:*:*
Range: <2.4.6
WordPress/Wordpress Importercpe-rescue
Package: https://wordpress.org/plugins/wordpress-importer

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/ad99b9ba-5f24-4682-a787-00f0e8e32603nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000