Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-2943

Date: September 6, 2022

The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the alm_repeaters_export() function. This makes it possible for authenticated attackers, with administrative privileges, to download arbitrary files hosted on the server that may contain sensitive content, such as the wp-config.php file.

Language: PHP

Severity Score

Related Resources (6)

https://plugins.svn.wordpress.org/ajax-load-more/tags/5.5.4/README.txt
https://gist.github.com/Xib3rR4dAr/f9a4b4838154854ec6cde7d5deb76bf9
https://www.wordfence.com/threat-intel/vulnerabilities/id/6d643d07-7533-430b-a1d8-8e66a2a2c5e6?source=cve
https://nvd.nist.gov/vuln/detail/CVE-2022-2943
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2943
https://www.mend.io/vulnerability-database/CVE-2022-2943

Severity Score

Weakness Type (CWE)

Externally Controlled Reference to a Resource in Another Sphere

CWE-610

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-22

External Control of File Name or Path

CWE-73

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us