Description
The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Admin Word Count Column | 2.2 – ≤ 2.2 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Admin Word Count Column 2.2 - Local File Inclusion http/cves/2022/CVE-2022-1390.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.