Lucene search
PatchstackCVELIST:CVE-2022-29445HistoryMay 18, 2022 - 4:39 p.m.
CVE-2022-29445 WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability
2022-05-1816:39:54
Patchstack
www.cve.org
4
wordpress
popup box
lfi
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.4%
Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company’s Popup Box plugin <= 2.1.2 at WordPress.
CNA Affected
[
{
"product": "Popup Box (WordPress plugin)",
"vendor": "Wow-Company",
"versions": [
{
"lessThanOrEqual": "2.1.2",
"status": "affected",
"version": "<= 2.1.2",
"versionType": "custom"
}
]
}
]Related
patchstack
patchstack
prion
prion
Design/Logic Flaw
2022-05-18 17:15:00
wpvulndb
wpvulndb
Popup Box < 2.2 - Admin+ LFI
2022-05-17 00:00:00
cve
cve
CVE-2022-29445
2022-05-18 17:15:08
nvd
nvd
CVE-2022-29445
2022-05-18 17:15:08
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.4%
Related for CVELIST:CVE-2022-29445