PT-2022-19603 · WordPress · Wordpress Infinite Scroll – Ajax Load More

Muhammad Zeeshan · Published 2022-09-06 · Updated 2023-11-02 · CVE-2022-2943

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 5.5.3

Description The issue allows authenticated attackers with administrative privileges to download arbitrary files hosted on the server due to insufficient file path validation on the alm repeaters export() function. This could lead to accessing sensitive content, such as the wp-config.php file.

Recommendations For WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 5.5.3, update to a version later than 5.5.3 to resolve the issue. As a temporary workaround, consider disabling the alm repeaters export() function until a patch is available. Restrict access to sensitive files on the server to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-2943

Affected Products

Wordpress Infinite Scroll – Ajax Load More

References · 8

• 🔥 https://gist.github.com/Xib3rR4dAr/f9a4b4838154854ec6cde7d5deb76bf9 · Exploit
• https://osv.dev/vulnerability/CVE-2022-2943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2943 · Security Note
• https://t.me/cvenotify/60060 · Telegram Post
• https://wordfence.com/vulnerability-advisories/#CVE-2022-2943 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/6d643d07-7533-430b-a1d8-8e66a2a2c5e6?source=cve · Note
• https://plugins.svn.wordpress.org/ajax-load-more/tags/5.5.4/README.txt · Note
• https://t.me/cvenotify/60348 · Telegram Post