CVE-2022-1657
🗓️ 13 Jun 2022 13:06:48Reported by WordfenceType 
cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 110 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2022-1657 | 19 May 202215:47 | – | circl |
 | JupiterX Theme 路径遍历漏洞 | 18 May 202200:00 | – | cnnvd |
 | WordPress JupiterX Theme和Jupiter Theme路径遍历漏洞 | 20 May 202200:00 | – | cnvd |
 | CVE-2022-1657 JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion | 13 Jun 202213:06 | – | cvelist |
 | EUVD-2022-24943 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-1657 | 13 Jun 202214:15 | – | nvd |
 | CVE-2022-1657 | 13 Jun 202214:15 | – | osv |
 | WordPress Jupiter premium theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability | 18 May 202200:00 | – | patchstack |
| WordPress JupiterX premium theme <= 2.0.6 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability | 18 May 202200:00 | – | patchstack |
 | Path traversal | 13 Jun 202214:15 | – | prion |
10
[
{
"product": "Jupiter",
"vendor": "ArtBees",
"versions": [
{
"lessThanOrEqual": "6.10.1",
"status": "affected",
"version": "6.10.1",
"versionType": "custom"
}
]
},
{
"product": "Jupiter X",
"vendor": "ArtBees",
"versions": [
{
"lessThanOrEqual": "2.0.6",
"status": "affected",
"version": "2.0.6",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| slug | request body | lib/admin/control-panel/control-panel.php | AJAX action triggers local file inclusion via slug parameter in control panel, enabling path traversal. | CWE-22 |
| slug | request body | framework/admin/control-panel/logic/functions.php | AJAX action in framework control panel uses slug to include local PHP files, allowing path traversal/LFI. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:22Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 3.18.8
EPSS0.01659
SSVC