CVE-2022-4693

Katalog CVE

CVSS 9.8 · Critical EPSS 1,6%

Kerentanan Insufficiently Protected Credentials pada pickplugins user verification. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.

Rincian

Terbit di NVD

23 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957 exploit · advisory pihak ketiga
• https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea exploit · advisory pihak ketiga