CVE-2022-2535

MEDIUMNuclei

SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-2535 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.

Description

The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

SearchWP Live Ajax Search

CVE List1.6.2 to < 1.6.2affected

Nuclei templates

1
ProjectDiscoveryMEDIUMSearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title DisclosureCVSS 5.3

The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink

Impact

Unauthenticated attackers can access titles and permalinks of private, draft, and pending posts through crafted live search queries with manipulated post_status parameters, potentially exposing confidential content before publication.

Remediation

Fixed in version 1.6.2

WeaknessesCWE-639
Authorsr3Y3r53, daffainfo
Template tagscvecve2022wpwp-pluginwordpresswpscansearchwp-live-ajax-searchsearchwpvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:a:searchwp:searchwp_live_ajax_search:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/searchwp-live-ajax-search/
FOFA: body=/wp-content/plugins/searchwp-live-ajax-search/
https://wpscan.com/vulnerability/0e13c375-044c-4c2e-ab8e-48cb89d90d02 https://nvd.nist.gov/vuln/detail/CVE-2022-2535 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2