Lucene search
HistoryJan 02, 2023 - 10:15 p.m.
CVE-2022-4140
welcart e-commerce
wordpress
plugin
validation
user input
arbitrary files
server
security vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.013 Low
EPSS
Percentile
85.9%
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server
Affected configurations
Node
collnewelcart_e-commerceRange<2.8.5wordpress
Related
prion
prion
Input validation
2023-01-02 22:15:00
jvn
jvn
cvelist
cvelist
cve
cve
CVE-2022-4140
2023-01-02 22:15:16
nuclei
nuclei
WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access
2023-03-31 11:28:24
wpvulndb
wpvulndb
Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
2022-12-05 00:00:00
wpexploit
wpexploit
Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
2022-12-05 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.013 Low
EPSS
Percentile
85.9%
Related for NVD:CVE-2022-4140