Lucene search

K
cvelistPatchstackCVELIST:CVE-2022-47595
HistoryMar 14, 2023 - 6:27 a.m.

CVE-2022-47595 WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal

2023-03-1406:27:58
CWE-22
Patchstack
www.cve.org
1
cve-2022-47595
path traversal
wp go maps

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

29.6%

Improper Limitation of a Pathname to a Restricted Directory (β€˜Path Traversal’) vulnerability in WP Go Maps (formerly WP Google Maps) plugin <=Β 9.0.15 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-google-maps",
    "product": "WP Go Maps (formerly WP Google Maps)",
    "vendor": "WP Go Maps",
    "versions": [
      {
        "changes": [
          {
            "at": "9.0.16",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "9.0.15",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

29.6%

Related for CVELIST:CVE-2022-47595