CVE-2022-2554

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

CVSS v3.1

4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS

0.83% chance of exploitation in the next 30 days, 55th percentile

Published

2022-10-10

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/5872f4bf-f423-4ace-b8b6-d4cc4f6ca8d9

References

• CVE Record
• NVD entry

Related

• CVE-2022-25523
• CVE-2022-25546
• CVE-2022-2552
• CVE-2022-25548
• CVE-2022-25516
• CVE-2022-25549