Lucene search
K

CVE-2022-2863

šŸ—“ļøĀ 16 Sep 2022Ā 00:00:00Reported byĀ WPScanTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ“°ļøĀ 6Ā Media mentionsšŸ‘Ā 87Ā Views🌐 WEB

The Migration, Backup, Staging WordPress plugin before 0.9.76 allows high privilege users to read any file via a Traversal attac

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today
WordPress WPvivid Backup Path Traversal Vulnerability
5 Oct 202200:00
–zdt
ATTACKERKB
CVE-2022-2863
16 Sep 202209:15
–attackerkb
Circl
CVE-2022-2863
16 Sep 202212:38
–circl
CNNVD
WordPress plugin Migration, Backup, Staging č·Æå¾„éåŽ†ę¼ę“ž
16 Sep 202200:00
–cnnvd
Cvelist
CVE-2022-2863 WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read
16 Sep 202200:00
–cvelist
EUVD
EUVD-2022-35097
3 Oct 202520:07
–euvd
Nuclei
WordPress WPvivid Backup <0.9.76 - Local File Inclusion
4 Jun 202603:48
–nuclei
NVD
CVE-2022-2863
16 Sep 202209:15
–nvd
OpenVAS
WordPress Migration, Backup, Staging - WPvivid Plugin < 0.9.76 Directory Traversal Vulnerability
19 Sep 202200:00
–openvas
Packet Storm
WordPress WPvivid Backup Path Traversal
4 Oct 202200:00
–packetstorm
Rows per page
NVD
Vulners
Node
[
  {
    "vendor": "Unknown",
    "product": "Migration, Backup, Staging – WPvivid",
    "versions": [
      {
        "version": "0.9.76",
        "status": "affected",
        "lessThan": "0.9.76",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
file_namequery param/wp-admin/admin-ajax.php?_wpnonce={{nonce}}&action=wpvivid_download_export_backup&file_name=../../../../../../../etc/passwd&file_size=922Path traversal vulnerability in WPvivid Backup plugin allows reading arbitrary files via crafted file_name parameter.CWE-22

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:01Current
4.8Medium risk
Vulners AI Score4.8
CVSS 3.14.9
EPSS0.10885
87