Lucene search
CydavePATCHSTACK:975D403770FE9BDC207BB87DA188C927HistoryMar 01, 2022 - 12:00 a.m.
WordPress Narnoo Distributor plugin <= 2.5.1 - Unauthenticated Local File Inclusion (LFI) vulnerability leading to Arbitrary File Read / RCE
2022-03-0100:00:00
cydave
patchstack.com
18
0.031 Low
EPSS
Percentile
91.1%
Unauthenticated Local File Inclusion (LFI) vulnerability leading to Arbitrary File Read / RCE discovered by cydave in WordPress Narnoo Distributor plugin (versions <= 2.5.1).
Solution
Deactivate and delete. This plugin has been closed as of February 18, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| narnoo distributor | le | 2.5.1 |
Related
cvelist
cvelist
wpexploit
wpexploit
cve
cve
CVE-2022-0679
2022-03-28 18:15:09
nuclei
nuclei
WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion
2022-10-03 11:02:07
wpvulndb
wpvulndb
prion
prion
Design/Logic Flaw
2022-03-28 18:15:00
nvd
nvd
CVE-2022-0679
2022-03-28 18:15:09