Lucene search

K
patchstackRafie Muhammad aka Yeraisci (Patchstack Alliance)PATCHSTACK:BE67E0615DCFC7FC0047664A9584F482
HistoryJul 12, 2022 - 12:00 a.m.

WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

2022-07-1200:00:00
Rafie Muhammad aka Yeraisci (Patchstack Alliance)
patchstack.com
15

0.001 Low

EPSS

Percentile

27.1%

Authenticated Arbitrary File Read via Export function vulnerability discovered by Rafie Muhammad aka Yeraisci (Patchstack Alliance) in WordPress GiveWP plugin (versions <= 2.20.2).

Solution

           Update the WordPress GiveWP plugin to the latest available version (at least 2.21.0).
CPENameOperatorVersion
givewple2.20.2

0.001 Low

EPSS

Percentile

27.1%

Related for PATCHSTACK:BE67E0615DCFC7FC0047664A9584F482