CVE-2022-4236

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server...

CVE-2022-4236

creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:05+00:00| seen| https://t.me/cibsecurity/55766 2023-11-13 19:56:56+00:00| seen| https://t.me/arpsyndicate/167...

CVE-2022-4236

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server...

CVE-2022-4236

Vulnerability summary (CVE-2022-4236): Welcart e-Commerce WordPress plugin versions before 2.8.5 fail to validate input used to output file content via an AJAX action accessible to authenticated users, enabling at least subscriber-level users to read arbitrary server files. Root cause: unvalidate...