.. / CVE-2022-4057

Exploit for Autoptimize < 3.1.0 - Information Disclosure (CVE-2022-4057)

Description:

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin’s exported settings and logs.

Nuclei Template

View the template here CVE-2022-4057.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-4057.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2022-4057
https://wordpress.org/plugins/autoptimize/
https://wpscan.com/vulnerability/95ee1b9c-1971-4c35-8527-5764e9ed64af