CVE-2022-0493

CVE-2022-0493 affects the WordPress String Locator plugin prior to version 2.5.0. The vulnerability arises from insufficient validation of the file path during searches, permitting high-privilege users (e.g., admin) to perform path traversal and query arbitrary files on the web server. Additional...