Vulnerability · Published May 10, 2026 · Assigned by VulnCheck

CVE-2022-50956WordPress Plugin amministrazione-aperta 3.7.3 Local File Read

Medium 6.2

In plain English

A medium-severity path traversal in amministrazione-aperta from amministrazione-aperta. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)6.2Medium

Exploit odds (30 days)0.2%top 95.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in the open parameter. Attackers can supply file paths through the open GET parameter in dispatcher.php to include and read sensitive files accessible to the web server.

Affected products (as reported)

Vendor	Product	Versions
amministrazione-aperta	amministrazione-aperta	3.7.3

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

ExploitDB-50838 exploit
Official Product Homepage product
VulnCheck Advisory: WordPress Plugin amministrazione-aperta 3.7.3 Local File Read third-party-advisory