← CVE Intelligence

CVE-2022-4140

Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access PUBLISHED

Description (CNA)

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server

Affected (CNA)

Vendor / productVersions
Unknown / Welcart e-Commerceaffected 0 before 2.8.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.