CVE-2022-3966

2022-11-1308:15:15

CWE-22

VulDB

web.nvd.nist.gov

cve-2022-3966

ultimate member plugin

vulnerability

critical

pathname traversal

remote attack

upgrade

patch

vdb-213545

nvd

security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

47.5%

JSON

A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affects the function load_template of the file includes/core/class-shortcodes.php of the component Template Handler. The manipulation of the argument tpl leads to pathname traversal. The attack may be initiated remotely. Upgrading to version 2.5.1 is able to address this issue. The name of the patch is e1bc94c1100f02a129721ba4be5fbc44c3d78ec4. It is recommended to upgrade the affected component. The identifier VDB-213545 was assigned to this vulnerability.

Affected configurations

Nvd

Vulners

Node

ultimatememberultimate_memberRange<2.5.1wordpress

VendorProductVersionCPE
ultimatememberultimate_member*cpe:2.3:a:ultimatemember:ultimate_member:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
ultimatemember	ultimate_member	*	cpe:2.3:a:ultimatemember:ultimate_member::::::wordpress::*

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "Ultimate Member Plugin",
    "versions": [
      {
        "version": "2.0",
        "status": "affected"
      },
      {
        "version": "2.1",
        "status": "affected"
      },
      {
        "version": "2.2",
        "status": "affected"
      },
      {
        "version": "2.3",
        "status": "affected"
      },
      {
        "version": "2.4",
        "status": "affected"
      },
      {
        "version": "2.5",
        "status": "affected"
      }
    ]
  }
]