CVE-2022-2046

low-risk
Published 2022-08-08

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run code on the server, which is a problem in multisite configurations.

Do I need to act?

-
0.29% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.9/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Directorist

Affected Vendors

Wpwax

References (4)

Third Party Advisory https://plugins.trac.wordpress.org/changeset/2752034/directorist?contextall=1&ol...
Exploit https://wpscan.com/vulnerability/03a04eab-be47-4195-af77-0df2a32eb807
Third Party Advisory https://plugins.trac.wordpress.org/changeset/2752034/directorist?contextall=1&ol...
Exploit https://wpscan.com/vulnerability/03a04eab-be47-4195-af77-0df2a32eb807
26
/ 100
low-risk
Severity 20/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal