Lucene search

Wpide - File Manager & Code Editor Security Vulnerabilities - January

cve

CVE-2022-2261

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.

7.2CVSS

6.8AI Score

0.001EPSS

2022-08-29 06:15 PM

cve

CVE-2022-35235

Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.

4.9CVSS

5.1AI Score

0.001EPSS

2022-08-23 04:15 PM

cve

CVE-2022-40217

Authenticated (admin+) Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.

7.2CVSS

6.9AI Score

0.001EPSS

2022-09-21 08:15 PM