Read the docs

Narnoo Distributor Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Narnoo Distributor Project records in CISA KEV

No Narnoo Distributor Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Narnoo Distributor 1 record HIGH

Records

1 record

TI-2022-00594 CVE-2022-0679 · GHSA-vr55-fv2w-8fhh

Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE

Priority HIGH 72

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to bo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4783 Published 2022-03-28 No fix listed CWE-22
Open these records in search →