Skip to main content

Herd Effects CVE-2022-29448

MEDIUM
Use of Incorrectly-Resolved Name or Reference (CWE-706)
2022-05-20 audit@patchstack.com
WordPress Information Disclosure Herd Effects
4.9
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.9 MEDIUM
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
May 20, 2022 - 20:15 nvd
MEDIUM 4.9

DescriptionNVD

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress.

AnalysisAI

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-706. Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress. Affected products include: Wow-Estore Herd Effects.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Herd Effects

View all
CVE-2024-3478 MEDIUM POC
6.1 May 02

The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attacke
CVE-2023-2362 MEDIUM POC
6.1 Jun 12

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plug
CVE-2023-4022 MEDIUM POC
4.8 Sep 11

The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high
CVE-2023-4318 MEDIUM POC
4.3 Sep 11

The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers t

Same weakness CWE-706 – Use of Incorrectly-Resolved Name or Reference

View all
CVE-2021-40539 CRITICAL POC
9.8
CVE-2020-15505 CRITICAL POC
9.8
CVE-2019-8908 CRITICAL POC
9.8
CVE-2019-7731 CRITICAL POC
9.8
CVE-2021-37144 CRITICAL POC
9.1
CVE-2023-28643 HIGH POC
8.8
CVE-2024-27295 HIGH POC
8.2
CVE-2026-25890 HIGH POC
8.1

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-29448 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy