CVE-2022-4022

The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While version 2.5 adds the ability to sanitize image as they are uploaded, the plugin defaults to disable sanitization and does not restrict SVG upload to only administrators. This allows authenticated attackers, with author-level privileges and higher, to upload malicious SVG files that can be embedded in posts and pages by higher privileged users. Additionally, the embedded JavaScript is also triggered on visiting the image URL, which allows an attacker to execute malicious code in browsers visiting that URL.

• CWE-79

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4022Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4022Third Party Advisory

Published

Nov 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40214Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-40215Multiple Authenticated Stored Cross-Site Scripting (XSS) vul…5.4
• CVE-2022-40216Auth. (subscriber+) Messaging Block Bypass vulnerability in …6.5
• CVE-2022-40217Authenticated (admin+) Arbitrary File Edit/Upload vulnerabil…7.2
• CVE-2022-40218Missing Authorization vulnerability in ThemeHunk Advance Wor…9.8
• CVE-2022-40219Cross-Site Request Forgery (CSRF) vulnerability in SedLex Fa…4.3
• CVE-2022-40220An OS command injection vulnerability exists in the httpd tx…8.8
• CVE-2022-40221Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-40222An OS command injection vulnerability exists in the m2m DELE…9.8
• CVE-2022-40223Nonce token leakage and missing authorization in SearchWP pr…4.3
• CVE-2022-40224A denial of service vulnerability exists in the web server f…7.5
• CVE-2022-40225A vulnerability has been identified in SIPLUS TIM 1531 IRC (…7.5