Lucene search
HistoryAug 15, 2022 - 11:21 a.m.
CVE-2022-2354
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%
The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.
Affected configurations
Node
wp-dbmanager_projectwp-dbmanagerRange<2.80.8wordpress
Related
wpexploit
wpexploit
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
2022-07-25 00:00:00
wpvulndb
wpvulndb
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
2022-07-25 00:00:00
prion
prion
Code injection
2022-08-15 11:21:00
cvelist
cvelist
CVE-2022-2354 WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
2022-08-15 08:36:54
cve
cve
CVE-2022-2354
2022-08-15 11:21:22
patchstack
patchstack
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%
Related for NVD:CVE-2022-2354