CVE-2023-2252
published 2024-01-16CVE-2023-2252: The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
PriorityP417low2.7CVSS 3.1
AVNACLPRHUINSUCLINAN
EXPLOIT
EPSS
1.31%
67.1th percentile
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wpwax | directorist | < 7.5.4 | 7.5.4 |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Directorist < 7.5.4 - Local File Inclusion
nuclei·CVSS 2.7
CVE-2023-2252 [LOW] Directorist < 7.5.4 - Local File Inclusion
Directorist < 7.5.4 - Local File Inclusion
Directorist before 7.5.4 is susceptible to Local File Inclusion as it does not validate the file parameter when importing CSV files.
Template:
id: CVE-2023-2252
info:
name: Directorist < 7.5.4 - Local File Inclusion
author: r3Y3r53
severity: low
description: |
Directorist before 7.5.4 is susceptible to Local File Inclusion as it does not validate the file parameter when importing CSV files.
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire system.
remediation: Fixed in version 7.5.4
reference:
- https://wpscan.com/vulnerability/9da6eede-10d0-4609-8b97-4a5d38fa8e69
- https://wordpress.org/plugins/directorist/advanced/
- https:
No writeups or analysis indexed.
2024-01-16
Published