CVE-2018-7422

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the…

published March 19, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
62%
Percentile
99.2
In the wild
Unconfirmed
What it is

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.62250 · 99.2th percentile
Published
2018-03-19T14:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 62% → 42%
    epss
  • 06 SEP 03:12Z
    EPSS moved 62% → 42%
    epss
  • 30 AUG 16:01Z
    EPSS moved 42% → 62%
    epss
  • 29 AUG 04:42Z
    EPSS moved 63% → 42%
    epss
  • 19 MAR 14:00Z
    A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the…
    cvelistv5