Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-4101
HistoryJan 16, 2023 - 4:15 p.m.

Path traversal

2023-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
3
path traversal
images optimize
upload
wordpress plugin
ajax action
unauthenticated users
security vulnerability

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.5%

JSON

The Images Optimize and Upload CF7 WordPress plugin through 2.1.4 does not validate the file to be deleted via an AJAX action available to unauthenticated users, which could allow them to delete arbitrary files on the server via path traversal attack.

CPENameOperatorVersion
images_optimize_and_upload_cf7le2.1.4

Related

cve 1
wpexploit 1
wpvulndb 1
cvelist 1
nvd 1
cve
cve
CVE-2022-4101
2023-01-16 16:15:11
wpexploit
wpexploit
Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
2022-12-21 00:00:00
wpvulndb
wpvulndb
Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
2022-12-21 00:00:00
cvelist
cvelist
CVE-2022-4101 Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
2023-01-16 15:37:49
nvd
nvd
CVE-2022-4101
2023-01-16 16:15:11

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.5%

JSON
Related for PRION:CVE-2022-4101
cve1wpexploit1wpvulndb1cvelist1nvd1