Is CVE-2022-50956 actively exploited?

No active exploitation of CVE-2022-50956 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-50956 be exploited remotely?

No. CVE-2022-50956 requires local access to exploit.

What is the CVSS score of CVE-2022-50956?

CVE-2022-50956 has a CVSS score of 6.2 (MEDIUM).

HOME VULNERABILITIESCVE-2022-50956

MEDIUM

CVE-2022-50956

CWE-22Published: May 10, 2026· Updated: May 12, 2026

6.2

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:7.7th

Official Description

WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in the open parameter. Attackers can supply file paths through the open GET parameter in dispatcher.php to include and read sensitive files accessible to the web server.

NVD Source

Technical Analysis

CVE-2022-50956 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.2.