7 matches found
VulnCheck KEV: CVE-2022-0679
The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure...
9.8CVSS7.3AI score0.4783EPSS
SaveExploits2References1
20