sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2022-4030 Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

High 8.1 Published Updated

Authenticated subscribers can delete arbitrary files via path traversal, potentially removing wp-config.php to enable site takeover and remote code execution.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2022-4030?

CVE-2022-4030 is a high-severity path traversal vulnerability in simplepress Simple:Press Forum, published on 29 Nov 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as a subscriber, to supply paths to arbitrary files on the server that will subsequently be deleted. This can be used to delete the wp-config.php file that can allow an attacker to configure the site and achieve remote code execution.

Weakness: CWE-22

Which versions are affected by CVE-2022-4030?

It affects 1 product.

Products include Simple-Press Simple\.

How do I fix CVE-2022-4030?

No fix has been published for CVE-2022-4030 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2022-4030 being exploited?

There is no known exploitation of CVE-2022-4030 in the wild and no public exploit code.

Sources

Also known as GHSA-gmfr-f9pg-xc4h.

Is CVE-2022-4030 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free