CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects WordPress.
CVE
CVE-2022-2261
Severity
HIGH
CVSS
7.2
EPSS
1.15%
WordPress
Original NVD Description
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)