CVE-2022-41618
WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.
Vulnerabilidad de Divulgación de Registro de Errores No Autenticado en el complemento Media Library Assistant en versiones <= 3.00 en WordPress.
The Media Library Assistant plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 3.00. This could allow unauthenticated attackers to extract error logs.
*Credits:
Vulnerability discovered by Brandon Roldan (Patchstack Alliance)
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-09-27 CVE Reserved
- 2022-09-29 CVE Published
- 2024-04-21 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-532: Insertion of Sensitive Information into Log File
CAPEC
References (2)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Davidlingren Search vendor "Davidlingren" | Media Library Assistant Search vendor "Davidlingren" for product "Media Library Assistant" | < 3.01 Search vendor "Davidlingren" for product "Media Library Assistant" and version " < 3.01" | wordpress |
Affected
| ||||||