{"id":"CVE-2022-29448","aliases":["EUVD-2022-33786","GHSA-pq6j-c37f-96x2"],"status":"published","title":"WordPress Herd Effects plugin \u003c= 5.2 - Local File Inclusion (LFI) vulnerability","description":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin \u003c= 5.2 at WordPress.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01027,"percentile":0.63878,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-706"],"published":"2022-05-20T19:59:37Z","modified":"2026-06-17T04:40:12Z","products":[{"vendor":"wow-company","product":"herd effects (wordpress plugin)"},{"vendor":"wow-estore","product":"herd_effects"}],"references":[{"url":"https://wordpress.org/plugins/mwp-herd-effect/#developers","tags":["x_refsource_CONFIRM","x_transferred","Product"]},{"url":"https://patchstack.com/database/vulnerability/mwp-herd-effect/wordpress-herd-effects-plugin-5-2-local-file-inclusion-lfi-vulnerability","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29448"},{"url":"https://github.com/advisories/GHSA-pq6j-c37f-96x2"}],"sources":{"cve":[{"id":"CVE-2022-29448","title":"WordPress Herd Effects plugin \u003c= 5.2 - Local File Inclusion (LFI) vulnerability","description":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin \u003c= 5.2 at WordPress.","status":"published","published":"2022-05-20T19:59:37.439Z","modified":"2026-04-28T16:07:42.332Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-33786","description":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin \u003c= 5.2 at WordPress.","status":"published","published":"2022-05-20T19:59:37Z","modified":"2026-04-28T16:07:42Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T19:24:15.342076Z"}],"ghsa":[{"id":"GHSA-pq6j-c37f-96x2","title":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company...","description":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin \u003c= 5.2 at WordPress.","status":"published","published":"2022-05-21T00:00:28Z","modified":"2023-01-28T05:05:23Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-706"],"updated_at":"2026-11-02T14:44:20.029387Z"}],"nvd":[{"id":"CVE-2022-29448","description":"Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin \u003c= 5.2 at WordPress.","status":"published","published":"2022-05-20T20:15:10.37Z","modified":"2026-06-17T04:40:12.66Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-706"],"updated_at":"2026-11-02T14:07:20.264424Z"}]}}