CVE-2022-0885

🗓️ 13 Jun 2022 12:41:39Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 107 Views🌐 WEB

The Member Hero WordPress plugin lacks authorization checks, allowing unauthenticated users to call arbitrary PHP functions

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-0885	6 Aug 202305:19	–	circl
CNNVD	WordPress plugin Member Hero 代码注入漏洞	13 Jun 202200:00	–	cnnvd
CNVD	WordPress Member Hero plugin code injection vulnerability	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-0885 Member Hero <= 1.0.9 - Unauthenticated RCE	13 Jun 202212:41	–	cvelist
Nuclei	Member Hero <=1.0.9 - Remote Code Execution	5 Jun 202603:02	–	nuclei
NVD	CVE-2022-0885	13 Jun 202213:15	–	nvd
OSV	CVE-2022-0885	13 Jun 202213:15	–	osv
Patchstack	WordPress Member Hero plugin <= 1.0.9 - Unauthenticated Remote Code Execution (RCE) vulnerability	18 May 202200:00	–	patchstack
Prion	Authorization	13 Jun 202213:15	–	prion
Positive Technologies	PT-2022-13501 · WordPress · Member Hero	13 Jun 202200:00	–	ptsecurity

NVD

Vulners

Node

memberhero member_heroRange≤1.0.9wordpress

[
  {
    "vendor": "Unknown",
    "product": "Member Hero",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "1.0.9"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/8b08b72e-5584-4f25-ab73-5ab0f47412df

Parameter	Position	Path	Description	CWE
action	query param	wp-admin/admin-ajax.php	Unauthenticated users can trigger an AJAX action to execute arbitrary PHP functions due to missing authorization checks.	CWE-862, CWE-94
_memberhero_hook	query param	wp-admin/admin-ajax.php	Unauthenticated users can trigger an AJAX action to execute arbitrary PHP functions due to missing authorization checks.	CWE-862, CWE-94