Exploit for Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload CVE-2022-1103

Name: Exploit for Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload CVE-2022-1103
Rating: 5 (58 reviews)

2022-04-19 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:9DDEEF95-7C7F-4296-A55B-FD3304C91C18
As any authenticated user, upload a PHP file via /wp-admin/upload.php?page=adv-file-upload

The file will be at https://example.com/wp-content/uploads/2022/03/<filename>.php