CVE-2022-4395

Exploit

EPSS 75.49%
Published 30.01.2023 21:15:10
Last modified 27.03.2025 20:15:17
Source contact@wpscan.com
Teams watchlist Login
Open Login

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Wpswings ≫ Membership For Woocommerce SwPlatformwordpress Version < 2.1.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	75.49%	0.989

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40

Third Party Advisory

Exploit

https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html

https://www.exploit-db.com/exploits/51959

https://nvd.nist.gov/vuln/detail/CVE-2022-4395

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-4395

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-4395

EUVD