CVE-2022-1390

🗓️ 25 Apr 2022 15:51:24Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 94 Views🌐 WEB

The Admin Word Count Column WordPress plugin through 2.2 allows unauthenticated attackers to read arbitrary files and potentially execute remote code

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-1390	25 Apr 202216:16	–	attackerkb
Circl	CVE-2022-1390	10 May 202500:00	–	circl
CNNVD	WordPress plugin Admin Word Count Column路径遍历漏洞	25 Apr 202200:00	–	cnnvd
CNVD	WordPress plugin Admin Word Count Column arbitrary file reading vulnerability	27 Apr 202200:00	–	cnvd
Cvelist	CVE-2022-1390 Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read	25 Apr 202215:51	–	cvelist
Nuclei	WordPress Admin Word Count Column 2.2 - Local File Inclusion	5 Jun 202603:02	–	nuclei
NVD	CVE-2022-1390	25 Apr 202216:16	–	nvd
OSV	CVE-2022-1390	25 Apr 202216:16	–	osv
Patchstack	WordPress Admin Word Count Column plugin <= 2.2 - Unauthenticated Arbitrary File Read vulnerability	29 Mar 202200:00	–	patchstack
Prion	Deserialization of untrusted data	25 Apr 202216:16	–	prion

NVD

Vulners

Node

admin_word_count_column_project admin_word_count_columnRange≤2.2wordpress

[
  {
    "product": "Admin Word Count Column",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.2",
        "status": "affected",
        "version": "2.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/166476/
wpscan	www.wpscan.com/vulnerability/6293b319-dc4f-4412-9d56-55744246c990

Parameter	Position	Path	Description	CWE
path	query param	/wp-content/plugins/admin-word-count-column/download-csv.php?path=/etc/passwd\0	Path parameter in download-csv.php can be exploited to read arbitrary files and potentially achieve RCE via Phar Deserialization.	CWE-22

21 Nov 2024 06:40Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.91147