Skip to content
OpenAdvisories
Unscored Scanner template CVE-2022-1392 EUVD-2022-24709GHSA-w4v4-mjqq-j2fw

Videos sync PDF <= 1.7.4 - Unauthenticated LFI

Published Apr 25, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues

Affected products

VendorProductAffectedFixed
— Videos sync PDF 1.7.4 – ≤ 1.7.4 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References