Critical severity9.1NVD Advisory· Published Jan 16, 2023· Updated Jun 17, 2026
CVE-2022-4101
CVE-2022-4101
Description
The Images Optimize and Upload CF7 WordPress plugin through 2.1.4 does not validate the file to be deleted via an AJAX action available to unauthenticated users, which could allow them to delete arbitrary files on the server via path traversal attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Images Optimize and Upload CF7description
- Range: <=2.1.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/2ce4c837-c62c-41ac-95ca-54bb1a6d1eebnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.