CVE-2022-2261

CVE-2022-2261: WPide < 3.0 - Admin+ Local File Inclusion

Vendor Unknown
Product WPIDE – File Manager & Code Editor
Weakness CWE-22 · Path traversal
Published August 29, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.

Key dates

02Disclosure timeline

August 29, 2022 CVE published
August 3, 2024 Record updated