CVE-2022-2261: vulnerability in WPIDE – File Manager & Code Editor
WPide < 3.0 - Admin+ Local File Inclusion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.5%
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.
Affected products
Unknown · WPIDE – File Manager & Code Editor