CVE-2022-3361

The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on the 'template' attribute used in shortcodes. This makes it possible for attackers with administrative privileges to supply arbitrary paths using traversal (../../) to access and include files outside of the intended directory. If an attacker can successfully upload a php file then remote code execution via inclusion may also be possible. Note: for users with less than administrative capabilities, /wp-admin access needs to be enabled for that user in order for this to be exploitable by those users.

• CWE-22
• CWE-22

• https://github.com/H4de5-7/vulnerabilities/blob/main/CVE-2022-3361.mdExploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8c7d5fbe-d272-46d4-9b33-889ba77dcc52?source=cve
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3361Third Party Advisory
• https://www.yuque.com/docs/share/23f988ad-1402-42f2-b8d2-c7a87a4022bdExploit, Third Party Advisory
• https://github.com/H4de5-7/vulnerabilities/blob/main/CVE-2022-3361.mdExploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3361Third Party Advisory
• https://www.yuque.com/docs/share/23f988ad-1402-42f2-b8d2-c7a87a4022bdExploit, Third Party Advisory

Published

Nov 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3354A vulnerability has been found in Open5GS up to 2.4.10 and c…7.5
• CVE-2022-3355Cross-site Scripting (XSS) - Stored in GitHub repository inv…5.4
• CVE-2022-3357The Smart Slider 3 WordPress plugin before 3.5.1.11 unserial…8.8
• CVE-2022-3358OpenSSL supports creating a custom cipher via the legacy EVP…7.5
• CVE-2022-3359The Shortcodes and extra features for Phlox theme WordPress …8.8
• CVE-2022-3360The LearnPress WordPress plugin before 4.1.7.2 unserialises …8.1
• CVE-2022-3362Insufficient Session Expiration in GitHub repository ikus060…9.8
• CVE-2022-3363Business Logic Errors in GitHub repository ikus060/rdiffweb …9.8
• CVE-2022-33631Microsoft Excel Security Feature Bypass Vulnerability7.3
• CVE-2022-33632Microsoft Office Security Feature Bypass Vulnerability4.7
• CVE-2022-33633Skype for Business and Lync Remote Code Execution Vulnerabil…7.2
• CVE-2022-33634Windows Point-to-Point Tunneling Protocol Remote Code Execut…8.1