Lucene search
HistoryAug 23, 2022 - 4:15 p.m.
CVE-2022-35235
cve-2022-35235
authenticated
arbitrary file read
xplodedthemes
wpide
wordpress
nvd
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.
Affected configurations
Node
xplodedthemeswpide_-_file_manager_\&_code_editorRange≤2.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xplodedthemes | wpide_\-_file_manager_\&_code_editor | * | cpe:2.3:a:xplodedthemes:wpide_\-_file_manager_\&_code_editor:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "WPIDE – File Manager & Code Editor (WordPress plugin)",
"vendor": "XplodedThemes",
"versions": [
{
"lessThanOrEqual": "2.6",
"status": "affected",
"version": "<= 2.6",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
prion
prion
Design/Logic Flaw
2022-08-23 16:15:00
nvd
nvd
CVE-2022-35235
2022-08-23 16:15:10
patchstack
patchstack
cvelist
cvelist
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
Related for CVE-2022-35235