CVE-2022-2261: Xplodedthemes Wpide

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.

Affected products

• Xplodedthemes Wpide: before 3.0 (fixed in 3.0)

Published 2022-08-29. Last modified 2026-06-17.