by Kastro
Paper/Archive/CVE-2022-1390

CVE-2022-1390

Unknown Admin Word Count Column — Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read

EPSS 22%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.6.976 × 2019.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique

Affected

ProductAffectedFixed inSource
Admin Word Count Column2.2 – 2.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/6293b319-dc4f-4412-9d56-55744246c990refpacketstormsecurity.com/files/166476