CVE-2022-33901
MEDIUM NUCLEIMultiSafepay <4.13.1 - Info Disclosure
Title source: llmDescription
Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress.
Exploits (1)
github
NO CODE
2 stars
by tomorroisnew · poc
https://github.com/tomorroisnew/CVE/tree/main/CVE-2022-33901
Nuclei Templates (1)
WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read
HIGHVERIFIEDby theamanrawat
Scores
CVSS v3
5.3
EPSS
0.1025
EPSS Percentile
93.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-552
Status
published
Products (1)
multisafepay/multisafepay_plugin_for_woocommerce
< 4.15.0
Published
Jul 22, 2022
Tracked Since
Feb 18, 2026