CVE-2022-4745

Katalog CVE

CVSS 7.1 · High EPSS 0,28%

Kerentanan pada wp-customerarea wp customer area. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.

Rincian

Terbit di NVD

13 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/9703f42e-bdfe-4787-92c9-47963d9af425 exploit · advisory pihak ketiga