{"cve":"CVE-2022-41840","epss":{"score":0.05521},"mitre":{"cpes":[],"created":"2022-11-18T18:27:05.985000+00:00","description":"Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2022/41xxx/CVE-2022-41840.json","references":["https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerability?_s_id=cve"],"title":"WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability","updated":"2026-04-28T16:07:50.068000+00:00","vendors":[],"weaknesses":["CWE-22"]},"nvd":{"cpes":["cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*"],"created":"2022-11-18T19:15:30.547000+00:00","description":"Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2022/CVE-2022-41840.json","references":["https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerability?_s_id=cve"],"title":null,"updated":"2026-06-17T05:03:54.230000+00:00","vendors":["welcart","welcart$PRODUCT$welcart_e-commerce"],"weaknesses":["CWE-22"]},"opencve":{"changes":[{"created":"2025-02-20T19:00:00+00:00","data":[{"details":["welcart","welcart$PRODUCT$welcart_e-commerce"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*"],"removed":["cpe:2.3:a:collne:welcart_e-commerce:*:*:*:*:*:wordpress:*:*"]},"type":"cpes"},{"details":{"added":["welcart","welcart$PRODUCT$welcart_e-commerce"],"removed":["collne","collne$PRODUCT$welcart_e-commerce"]},"type":"vendors"}],"id":"05d1c55f-d598-498d-91de-d39890274cba"},{"created":"2025-02-20T20:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"d14abe23-6500-43f5-b04c-155f98b0b88f"}],"cpes":{"data":["cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*"],"providers":["nvd"]},"created":{"data":"2022-11-18T18:27:05.985000+00:00","provider":"mitre"},"description":{"data":"Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.05521},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability","provider":"mitre"},"updated":{"data":"2025-02-20T19:53:11.910000+00:00","provider":"mitre"},"vendors":{"data":["welcart","welcart$PRODUCT$welcart_e-commerce"],"providers":["nvd"]},"weaknesses":{"data":["CWE-22"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2022-11-18T18:27:05.985000+00:00","description":"Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability","updated":"2025-02-20T19:15:12.808000+00:00","vendors":[],"vulnrichment_repo_path":"2022/41xxx/CVE-2022-41840.json","weaknesses":[]}}