exploitDog

CVE-2022-34487

Опубликовано: 21 июл. 2022

Источник: nvd

CVSS3: 9.8

CVSS3: 5.3

EPSS Средний

Описание

Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

Ссылки

https://patchstack.com/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-plugin-3-0-3-unauthenticated-arbitrary-option-update-vulnerability
Release Notes
Third Party Advisory
https://wordpress.org/plugins/shortcode-addons/#developers
Release Notes
Third Party Advisory
https://patchstack.com/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-plugin-3-0-3-unauthenticated-arbitrary-option-update-vulnerability
Release Notes
Third Party Advisory
https://wordpress.org/plugins/shortcode-addons/#developers
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oxilab:shortcode_addons:*:*:*:*:*:wordpress:*:*

Версия до 3.0.3 (исключая)

EPSS

Процентиль: 98%

0.49676

Средний

9.8 Critical

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-264

NVD-CWE-Other

Связанные уязвимости

GHSA-2pxw-qgwm-32jg

CVSS3: 5.3

github

больше 3 лет назад

Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

EPSS

Процентиль: 98%

0.49676

Средний

9.8 Critical

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-264

NVD-CWE-Other