CVE-2022-4030 - Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

Back Back to CVE browser

HIGH

Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

Published Nov 29, 2022

8.1

HIGH

CVSS 3.1

EPSS 1.69%

Description

The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as a subscriber, to supply paths to arbitrary files on the server that will subsequently be deleted. This can be used to delete the wp-config.php file that can allow an attacker to configure the site and achieve remote code execution.

Affected products

Vendor Simplepress Product Simple:Press – WordPress Forum Plugin Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=6.8

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Simplepress

Simple:Press – WordPress Forum Plugin

unaffected

Version	Status	Constraints
-	affected	<=6.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51409		Advisory
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2804020%40simplepress&new=2804020%40simplepress&sfp_email=&sfph_mail=		PatchThird Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/43bcf3ab-4201-4a61-82c5-2dc60b684989?source=cve
https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4030		Third Party Advisory