CVE-2022-1392
Videos sync PDF <= 1.7.4 - Unauthenticated LFI
Vexday Risk Score
23Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 11.1%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
25 Apr 2022Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues
Affected products
Unknown · Videos sync PDFWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →