CVE-2022-2441

🗓️ 20 Oct 2023 07:29:28Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

ImageMagick Engine plugin for WordPress vulnerable to remote code executio

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-2441	20 Oct 202308:15	–	attackerkb
CNNVD	WordPress Plugin ImageMagick Engine Cross-Site Request Forgery Vulnerability	20 Oct 202300:00	–	cnnvd
Cvelist	CVE-2022-2441 ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution	20 Oct 202307:29	–	cvelist
EUVD	EUVD-2022-34702	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2441	20 Oct 202308:15	–	nvd
OSV	CVE-2022-2441	20 Oct 202308:15	–	osv
Patchstack	WordPress ImageMagick Engine plugin <= 1.7.4 - Remote Code Execution (RCE) via Cross-Site Request Forgery (CSRF) vulnerability	19 Oct 202200:00	–	patchstack
Prion	Remote code execution	20 Oct 202308:15	–	prion
Positive Technologies	PT-2023-12753 · WordPress · Imagemagick Engine	20 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-2441	5 Feb 202521:23	–	redhatcve

NVD

Vulners

Node

orangelab imagemagick_engineRange≤1.7.5wordpress

[
  {
    "vendor": "rickardw",
    "product": "ImageMagick Engine",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.7.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
github	www.github.com/orangelabweb/imagemagick-engine/blob/1.7.4/imagemagick-engine.php
exploit-db	www.exploit-db.com/exploits/51025
github	www.github.com/orangelabweb/imagemagick-engine/blob/v.1.7.2/imagemagick-engine.php
wordfence	www.wordfence.com/vulnerability-advisories-continued/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b1f17a83-1df0-44fe-bd86-243cff6ec91b
plugins	www.plugins.trac.wordpress.org/changeset

Parameter	Position	Path	Description	CWE
action	query param	/wp-admin/admin-ajax.php?action=ime_test_im_path&cli_path=payload	Remote code execution via vulnerable cli_path parameter in ImageMagick Engine plugin for WordPress (unauthenticated user can trigger RCE by tricking an admin to perform action).	CWE-352
cli_path	query param	/wp-admin/admin-ajax.php?action=ime_test_im_path&cli_path=payload	Remote code execution via vulnerable cli_path parameter in ImageMagick Engine plugin for WordPress (unauthenticated user can trigger RCE by tricking an admin to perform action).	CWE-352

08 Apr 2026 19:17Current

9High risk

Vulners AI Score9

CVSS 3.18.8

EPSS0.01898

SSVC

CWE-352