VulnerabilityModified

CVE-2022-2638

This could allow high privilege users to delete arbitrary file from the server

MEDIUM 6.5EPSS 1.14%

Does this matter?

Lower severity and a low EPSS score (1.14%). Track it; it rarely justifies an emergency change on its own.

Description

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
EPSS: 1.14% probability · 65th percentile
CISA KEV: Not listed
Weakness: CWE-73, CWE-610
Affected: atlasgondal/export all urls
Source: contact@wpscan.com

References

https://wpscan.com/vulnerability/70840a72-ccdc-4eee-9ad2-874809e5de11Exploit, Third Party Advisory
https://wpscan.com/vulnerability/70840a72-ccdc-4eee-9ad2-874809e5de11Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.