exploitDog

CVE-2022-25649

Опубликовано: 05 авг. 2022

Источник: nvd

CVSS3: 5

CVSS3: 8.8

EPSS Низкий

Описание

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

Ссылки

https://dzv365zjfbd8v.cloudfront.net/changelogs/affiliate-for-woocommerce/changelog.txt
Release Notes
Third Party Advisory
https://patchstack.com/database/vulnerability/affiliate-for-woocommerce/wordpress-affiliate-for-woocommerce-premium-plugin-4-7-0-multiple-improper-access-control-vulnerabilities
Third Party Advisory
https://dzv365zjfbd8v.cloudfront.net/changelogs/affiliate-for-woocommerce/changelog.txt
Release Notes
Third Party Advisory
https://patchstack.com/database/vulnerability/affiliate-for-woocommerce/wordpress-affiliate-for-woocommerce-premium-plugin-4-7-0-multiple-improper-access-control-vulnerabilities
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:storeapps:affiliate_for_woocommerce:*:*:*:*:*:wordpress:*:*

Версия до 4.8.0 (исключая)

EPSS

Процентиль: 70%

0.00648

Низкий

5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-264

NVD-CWE-Other

Связанные уязвимости

GHSA-cf9j-7x8p-4gvv

CVSS3: 8.8

github

больше 3 лет назад

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

EPSS

Процентиль: 70%

0.00648

Низкий

5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-264

NVD-CWE-Other