Lucene search

PatchstackCVELIST:CVE-2022-29447

HistoryMay 20, 2022 - 8:17 p.m.

CVE-2022-29447 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability

2022-05-2020:17:03

Patchstack

www.cve.org

wordpress

hover effects

plugin

authenticated

local file inclusion

lfi

vulnerability

wow-company

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.4%

JSON

Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company’s Hover Effects plugin <= 2.1 at WordPress.

CNA Affected

[
  {
    "product": "Hover Effects – easily create any hover effect (WordPress plugin)",
    "vendor": "Wow-Company",
    "versions": [
      {
        "lessThanOrEqual": "2.1",
        "status": "affected",
        "version": "<= 2.1",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/hover-effects/wordpress-hover-effects-plugin-2-1-authenticated-local-file-inclusion-lfi-vulnerability

wordpress.org/plugins/hover-effects/#developers

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.4%

JSON

Related for CVELIST:CVE-2022-29447