Skip to main content

Amministrazione Aperta

2 CVEs product

Monthly

CVE-2022-50956 May 10, 12:12 MEDIUM POC This Month

WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in the. Rated medium severity (CVSS 6.9), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal Amministrazione Aperta
NVD Exploit-DB
CVSS 4.0
6.9
EPSS
0.0%
CVE-2022-1560 May 16, 15:15 MEDIUM POC This Month

The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Path Traversal Amministrazione Aperta
NVD WPScan
CVSS 3.1
6.5
EPSS
2.2%
EPSS 0% CVSS 6.9
MEDIUM POC This Month

WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in the. Rated medium severity (CVSS 6.9), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal +1
NVD Exploit-DB
EPSS 2% CVSS 6.5
MEDIUM POC This Month

The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Path Traversal Amministrazione Aperta
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy