CVE-2022-1390 : What You Need to Know

The Admin Word Count Column WordPress plugin version 2.2 and below is affected by an unauthenticated arbitrary file read vulnerability, allowing attackers to read arbitrary files.

Understanding CVE-2022-1390

This CVE identifies a security flaw in the Admin Word Count Column WordPress plugin version 2.2 and earlier that could lead to unauthorized access to server files.

What is CVE-2022-1390?

The Admin Word Count Column plugin does not properly validate the path parameter provided to readfile(), enabling unauthenticated attackers to read arbitrary files on servers using an outdated PHP version vulnerable to the null byte technique. This could potentially result in Remote Code Execution (RCE) through Phar Deserialization.

The Impact of CVE-2022-1390

The vulnerability could allow malicious actors to access sensitive files on the server, leading to potential data breaches, unauthorized disclosure of information, and even RCE attacks.

Technical Details of CVE-2022-1390

This section delves into the specifics of the vulnerability, including its description, affected systems and versions, and the exploitation mechanism.

Vulnerability Description

The flaw stems from the lack of validation in the path parameter used by readfile(), enabling attackers to traverse directories and access unauthorized files.

Affected Systems and Versions

Admin Word Count Column plugin version 2.2 and below are susceptible to this vulnerability.

Exploitation Mechanism

Attackers can exploit this issue by manipulating the path parameter to read and potentially execute files on the server.

Mitigation and Prevention

To safeguard your systems from CVE-2022-1390, follow immediate steps and adopt long-term security practices.

Immediate Steps to Take

Update the Admin Word Count Column plugin to the latest version to eliminate the vulnerability.
Monitor server logs for any suspicious activity indicating file read attempts.

Long-Term Security Practices

Regularly update all plugins and software components to mitigate potential security risks.
Implement proper input validation and security mechanisms to prevent similar vulnerabilities in the future.

Patching and Updates

Stay informed about security patches released by plugin developers and promptly apply them to prevent exploitation of known vulnerabilities.