High severity8.8NVD Advisory· Published Jun 13, 2022· Updated Jun 17, 2026
CVE-2022-1777
CVE-2022-1777
Description
The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload arbitrary HTML files as well as delete all files or arbitrary ones.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Filrdescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/a50dc7f8-a9e6-41fa-a047-ad1c3bc309b4nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.