TI-2022-01271 CVE-2022-1390 · GHSA-35fp-65cr-47q7Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File ReadPriority MEDIUM 62The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.21881 · Published 2022-04-25 · No fix listed CWE-22