PT-2022-13850 · WordPress · Admin Word Count Column

Hassan Khan Yusufzai + 1 · Published 2022-04-25 · Updated 2022-05-04 · CVE-2022-1390

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Admin Word Count Column WordPress plugin versions 2.2 and earlier

Description The issue allows unauthenticated attackers to read arbitrary files on a server running an old version of PHP susceptible to the null byte technique. This could also lead to remote code execution (RCE) by using a Phar Deserialization technique.

Recommendations For Admin Word Count Column WordPress plugin versions 2.2 and earlier, update to a version that fixes the issue with the readfile() function and its handling of the path parameter to prevent arbitrary file reading and potential RCE.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-1390

Affected Products

Admin Word Count Column

References · 4

• 🔥 https://packetstormsecurity.com/files/166476 · Exploit
• 🔥 https://wpscan.com/vulnerability/6293b319-dc4f-4412-9d56-55744246c990 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1390 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1390 · Vendor Advisory