← All advisories

Medium severity6.5NVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026

CVE-2024-12163

CVE-2024-12163

Description

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Goodlayers/Goodlayers Core
cpe:2.3:a:goodlayers:goodlayers_core:*:*:*:*:*:wordpress:*:*
Range: <2.1.3
WordPress/Goodlayers Corecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.1.3
Package: https://wordpress.org/plugins/goodlayers-core

Patches

Vulnerability mechanics

References

1

wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.