Lucene search
HistoryAug 23, 2022 - 4:15 p.m.
CVE-2022-35235
authenticated
arbitrary file read
xplodedthemes
wpide plugin
wordpress
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
27.0%
Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.
Affected configurations
Node
xplodedthemeswpide_-_file_manager_\&_code_editorRange<3.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xplodedthemes | wpide_-_file_manager_\&_code_editor | * | cpe:2.3:a:xplodedthemes:wpide_-_file_manager_\&_code_editor:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Design/Logic Flaw
2022-08-23 16:15:00
patchstack
patchstack
cve
cve
CVE-2022-35235
2022-08-23 16:15:10
cvelist
cvelist
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
27.0%
Related for NVD:CVE-2022-35235