Lucene search
PRIOn knowledge basePRION:CVE-2022-2638HistoryAug 29, 2022 - 6:15 p.m.
Path traversal
2022-08-2918:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
export all urls
path traversal
csv file
high privilege users
server security
0.001 Low
EPSS
Percentile
34.3%
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server
| CPE | Name | Operator | Version |
|---|---|---|---|
| export_all_urls | lt | 4.4 |
Related
openvas
openvas
WordPress Export All URLs Plugin < 4.4 Arbitrary File Deletion Vulnerability
2023-09-15 00:00:00
cvelist
cvelist
CVE-2022-2638 Export All URLs < 4.4 - Admin+ Arbitrary System File Removal
2022-08-29 17:15:37
cve
cve
CVE-2022-2638
2022-08-29 18:15:09
patchstack
patchstack
nvd
nvd
CVE-2022-2638
2022-08-29 18:15:09