Skip to content
Sign in
Not rated

CVE-2022-0779 The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX…

Description

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads

Affected products and versions

Product Affected versions Fixed in
User Meta – User Profile Builder and User management plugin 2.4 earliest → < 2.4.4 2.4.4

Other CVEs of User Meta – User Profile Builder and User management plugin

The 2 CVEs of User Meta – User Profile Builder and User management plugin →
CVE-2022-0376 The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels… Not rated
Track this CVE