WordPress Plugin Vulnerabilities

WPide < 3.0 - Admin+ Arbitrary File Edit & Upload

Description

The plugin does not validate files to be edited or upload, which could allow high privilege users such as admin to edit and upload arbitrary files

Affects Plugins

Plugin icon
wpide
Fixed in 3.0

References

CVE
CVE-2022-40217

Miscellaneous

Original Researcher
Vlad Vector
Verified
No
WPVDB ID
3c6c7b10-1d0f-4762-b681-b0b1cca598a7

Timeline

Publicly Published
2022-08-09 (about 3 years ago)
Added
2022-09-21 (about 3 years ago)
Last Updated
2022-09-21 (about 3 years ago)

Other

Published
Title
Published
2022-12-05
Title
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
Published
2023-07-12
Title
User Registration < 3.0.2.1 - Subscriber+ Arbitrary File Upload
Published
2024-02-14
Title
WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload
Published
2014-08-01
Title
SlimStat-Ex - Open Flash Chart Arbitrary File Creation
Published
2023-12-05
Title
WappPress < 6.0.0 - Unauthenticated Arbitrary File Upload