← Database

CVE-2022-2261

HIGH CVSS: 7.2 Published: 2022-08-29 Modified: 2026-06-17

Description

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.

Affected Platforms

Xplodedthemes Wpide

Weakness Type

CWE-22

References