CVE-2022-29447: WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability
Published May 20, 2022
·Updated
Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.
Affected Software
1 affected component
Wow-Company Hover Effects Wordpress<=2.1
Remediation
Information
Update to 2.1.1 or higher version.
Event History
May 20, 2022
CVE Published
via MITRE·08:17 PM
Data Sourced
via MITRE·08:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-29447?
CVE-2022-29447 is an Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.
2
How severe is CVE-2022-29447?
CVE-2022-29447 has a severity rating of 7.2 (high).
3
What software is affected by CVE-2022-29447?
The Wow-Company's Hover Effects plugin version up to and including 2.1 at WordPress is affected by CVE-2022-29447.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-29447?
The Common Weakness Enumeration (CWE) ID associated with CVE-2022-29447 is CWE-552.
5
How can I fix CVE-2022-29447?
To fix CVE-2022-29447, it is recommended to update Wow-Company's Hover Effects plugin to a version higher than 2.1.