Vulnerability · Published Dec 14, 2021 · Assigned by Wordfence
CVE-2021-39312True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read
High 7.5
In plain English
A high-severity path traversal in True Ranker from True Ranker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 77.9% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)77.9%top 0.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling2Nuclei, Public PoC
Official description
The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| True Ranker | True Ranker | 2.2.2 – through 2.2.2 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39312 x_refsource_MISC
- https://plugins.trac.wordpress.org/browser/seo-local-rank/tags/2.2.2/admin/vendor/datatables/examples/resources/examples.php x_refsource_MISC
- http://packetstormsecurity.com/files/165434/WordPress-The-True-Ranker-2.2.2-Arbitrary-File-Read.html x_refsource_MISC