CVE-2022-29448

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress.

Score

CVSS 3.1 6.8 Medium

Status

Modified - audit@patchstack.com

Published

2022-05-20

Last modified

2026-04-28

Weaknesses

CWE-706

Affected products

• Herd Effects Wordpress Plugin (Wow-company)
• Herd Effects (Wow-estore)

References

• https://patchstack.com/database/vulnerability/mwp-herd-effect/wordpress-herd-effects-plugin-5-2-local-file-inclusion-lf…
• https://wordpress.org/plugins/mwp-herd-effect/#developers