.. / CVE-2022-4057

• Info Disclosure
• Nuclei
• Web

Exploit for Autoptimize < 3.1.0 - Information Disclosure (CVE-2022-4057)

Description:

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin’s exported settings and logs.

Nuclei Template

View the template here CVE-2022-4057.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-4057.yaml

References: