CVE-2022-0779

CVE-2022-0779 affects the WordPress plugin User Meta (before 2.4.4). The vulnerability stems from the Ajax action um_show_uploaded_file not validating the filepath parameter, enabling a low-privilege user (e.g., subscriber) to perform path traversal and enumerate local server files. The Red Hat a...

PT-2022-13432

Name of the Vulnerable Software and Affected Versions User Meta WordPress plugin versions prior to 2.4.4 Description The issue concerns the User Meta WordPress plugin, where the filepath parameter of its um show uploaded file AJAX action is not properly validated. This could allow low-privileged...

CVE-2022-0779: Improper Limitation of a Pathname to a Restricted Directory

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its umshowuploadedfile AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads...

PT-2022-13137

Name of the Vulnerable Software and Affected Versions User Meta WordPress plugin versions prior to 2.4.3 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of the Form Name and Shared Field Labels in the admin...

CVE-2022-0376: Improper Neutralization of Input During Web Page Generation

The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dashboard when editing a form, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfilteredhtml is...