VulnSocial

CVE-2022-50953Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing directory traversal sequences and null bytes to bypass file restrictions and read sensitive files like system configuration.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-08: 2Technical Details · 2026-06-08: 206-08
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2022-50953 WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null… https://www.cve.org/CVERecord?id=CVE-2022-50953 ----- Traducción: CVE-2022-50953 Wor… http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2022‑50953, describing a local file read flaw in the WordPress plugin "admin‑word‑count‑column" 2.2 that permits unauthenticated file reads, but it does not provide PoC or exploit details, active exploitation evidence, nor patch information.

    0000024
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2022-50953 WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null… https://www.cve.org/CVERecord?id=CVE-2022-50953

    Post summary

    The post announces CVE-2022-50953 in the WordPress plugin admin‑word‑count‑column, describing a local file read flaw allowing unauthenticated file reads.

    00000195
    57.6K followersView on X

Explore more

Back to dashboard