String Locator Project

string_locator_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

String Locator

string_locator

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-0493 1String Locator Project 1String Locator Jun 17, 2026 Mar 28, 2022 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversa...Show more The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-0493

1String Locator Project

1String Locator

Jun 17, 2026

Mar 28, 2022

N/A· v4

4.9 MEDIUM· v3

4.0 MEDIUM· v2

The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.Show less