CVE-2022-33901 - WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability

HIGH

WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability

Published Jul 22, 2022

7.5

HIGH

CVSS 3.1

EPSS 2.66%

Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
<= 4.13.1	affected	<=4.13.1

No remediation recorded yet.

Weaknesses (1)

CWE-552

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36938		Advisory
https://patchstack.com/database/vulnerability/multisafepay/wordpress-multisafepay-plugin-for-woocommerce-plugin-4-13-1-unauthenticated-arbitrary-file-read-vulnerability		x_refsource_CONFIRMThird Party Advisory
https://wordpress.org/plugins/multisafepay/#developers		x_refsource_CONFIRMRelease NotesThird Party Advisory