Lucene search

CVE-2018-7422

🗓️ 19 Mar 2018 14:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 88 Views🌐 WEB

Local File Inclusion vulnerability in WordPress Site Editor plugi

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 14
Check Point Advisories	WordPress Site Editor Plugin Local File Inclusion (CVE-2018-7422)	12 Jul 202000:00	–	checkpoint_advisories
NVD	CVE-2018-7422	19 Mar 201814:29	–	nvd
Circl	CVE-2018-7422	23 Mar 201800:00	–	circl
0day.today	WordPress Site Editor 1.1.1 Local File Inclusion Vulnerability	20 Mar 201800:00	–	zdt
0day.today	Wordpress Site Editor 1.1.1 Plugin - Local File Inclusion Vulnerability	23 Mar 201800:00	–	zdt
Nuclei	WordPress Site Editor <=1.1.1 - Local File Inclusion	11 Apr 202110:19	–	nuclei
Packet Storm	WordPress Site Editor 1.1.1 Local File Inclusion	16 Mar 201800:00	–	packetstorm
Exploit DB	WordPress Plugin Site Editor 1.1.1 - Local File Inclusion	23 Mar 201800:00	–	exploitdb
Prion	Path traversal	19 Mar 201814:29	–	prion
WPVulnDB	Site Editor <= 1.1.1 - Local File Inclusion (LFI)	16 Mar 201800:00	–	wpvulndb

Nvd

Node

siteeditor site_editorRange≤1.1.1wordpress

Source	Link
exploit-db	www.exploit-db.com/exploits/44340/
wpvulndb	www.wpvulndb.com/vulnerabilities/9044
seclists	www.seclists.org/fulldisclosure/2018/Mar/40

Parameter	Position	Path	Description	CWE
ajax_path	query param	/wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php	Local File Inclusion vulnerability allows attackers to retrieve arbitrary files due to improper sanitization of ajax_path parameter.	CWE-22, CWE-829

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Mar 2018 14:29Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.91593