Vulnerability Details CVE-2022-29445
Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Popup Box plugin <= 2.1.2 at WordPress.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.6%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 6.5
References
- https://patchstack.com/database/vulnerability/popup-box/wordpress-popup-box-plugin-2-1-2-authenticated-local-file-inclusion-lfi-vulnerability
- https://wordpress.org/plugins/popup-box/#developers
- https://patchstack.com/database/vulnerability/popup-box/wordpress-popup-box-plugin-2-1-2-authenticated-local-file-inclusion-lfi-vulnerability
- https://wordpress.org/plugins/popup-box/#developers
Products affected by CVE-2022-29445
-
cpe:2.3:a:wow-estore:popup_box:*