Files or Directories Accessible to External Parties
CVE-2022-29446
Summary
Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress.
- LOW
- NETWORK
- HIGH
- UNCHANGED
- REQUIRED
- HIGH
- HIGH
- HIGH
CWE-552 - Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
References
Advisory Timeline
- Published
