Vulnerability · Published Mar 28, 2022 · Assigned by WPScan

CVE-2022-0493String Locator < 2.5.0 - Admin+ Arbitrary File Read

Medium 4.9

In plain English

A medium-severity path traversal in String locator from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).

Severity (CVSS NVD)4.9Medium

Exploit odds (30 days)1.4%top 27.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.

Affected products (as reported)

Vendor	Product	Versions
Unknown	String locator	2.5.0 – before 2.5.0

Weakness: CWE-22

References

https://wpscan.com/vulnerability/21e2e5fc-03d2-4791-beef-07af6bf985ed x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2685592 x_refsource_CONFIRM