CVE-2022-1392CWE-22

CVE-2022-1392: vulnerability in Videos sync PDF

Videos sync PDF <= 1.7.4 - Unauthenticated LFI

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 11%
The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues