.. / CVE-2022-1442

• Info Disclosure
• Nuclei
• Web

Exploit for WordPress Metform <=2.1.3 - Information Disclosure (CVE-2022-1442)

Description:

WordPress Metform plugin through 2.1.3 is susceptible to information disclosure due to improper access control in the ~/core/forms/action.php file. An attacker can view all API keys and secrets of integrated third-party APIs such as that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more.

Nuclei Template

View the template here CVE-2022-1442.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1442.yaml

References: