CVE-2022-1777: Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX Calls
The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload arbitrary HTML files as well as delete all files or arbitrary ones.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Filr WordPress plugin vulnerability?
The vulnerability ID for this Filr WordPress plugin vulnerability is CVE-2022-1777.
What is the severity of CVE-2022-1777?
The severity of CVE-2022-1777 is high with a CVSS score of 8.8.
What is the affected software for CVE-2022-1777?
The affected software for CVE-2022-1777 is Filr WordPress plugin before version 1.2.2.1.
What is the impact of CVE-2022-1777?
CVE-2022-1777 allows any authenticated users, such as subscribers, to call two AJAX actions without proper authorization, potentially leading to arbitrary file uploads.
Is there a fix available for CVE-2022-1777?
Yes, the fix for CVE-2022-1777 is to update the Filr WordPress plugin to version 1.2.2.1 or later.