Lucene search
PRIOn knowledge basePRION:CVE-2022-4298HistoryJan 02, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
authorization check
input validation
unauthenticated attackers
arbitrary file.
The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wholesale_market | lt | 2.2.1 |
Related
cve
cve
CVE-2022-4298
2023-01-02 22:15:16
nvd
nvd
CVE-2022-4298
2023-01-02 22:15:16
wpexploit
wpexploit
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
2022-12-12 00:00:00
wpvulndb
wpvulndb
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
2022-12-12 00:00:00
cvelist
cvelist