High severity · published Apr 4, 2022
CVE-2022-0403
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues (CVE-2021-32682), and…
8.1
CVSS
1.3%
EPSS
No
On KEV
Description
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues (CVE-2021-32682), and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users, such as subscriber to call it. Furthermore, as the options passed to the elFinder library does not restrict any file type, users with a role as low as subscriber can Create/Upload/Delete Arbitrary files and folders.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LF
Library File Manager · Wpjos
before 5.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-0403
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-0403
Exploit
https://wpscan.com/vulnerability/997a7fbf-98c6-453e-ad84-75c1e91d5a1e
More from Library File Manager
6.5
CVE-2017-20091
A vulnerability was found in File Manager Plugin 3.0.1