CVE Database /
CVE-2022-2638
CVE · Medium
CVE-2022-2638 — Export All URLs [export-all-urls] < 4.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2638
|
Export All URLs [export-all-urls] < 4.4 |
External Control of File Name or Path |
Medium
6.5
|
< 4.4
|
4.4 |
2022-08-08 |
—
|
CVE-2022-2638
The Export All URLs plugin through version 4.3 contains a vulnerability in the extract-all-urls-settings.php file where the 'f' parameter lacks proper validation of file paths and types. This flaw allows administrators with authenticated access to delete any files present on the server. The issue has been addressed in version 4.4 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings