CVE-2022-4363: falha de média gravidade em Wholesale Market
Wholesale Market <= 2.2.2 - Settings Update via CSRF
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.2%
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVEs relacionadas — Wholesale Market
No mesmo produto, das mais perigosas para as menos.
CVE-2022-4298CRITICALWholesale Market < 2.2.1 - Unauthenticated Arbitrary File DownloadEPSS 2.0%CVE-2022-4106HIGHWholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File DownloadEPSS 0.9%CVE-2022-4108MEDIUMWholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File DownloadEPSS 0.9%CVE-2022-4109LOWWholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log DownloadEPSS 0.7%