CVE-2022-3082

🗓️ 17 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

The miniOrange Discord Integration WordPress plugin before 2.1.6 lacks authorization and CSRF protection, enabling any logged-in user to call AJAX actions and possibly disable the app

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-3082	13 May 202516:30	–	circl
CNNVD	WordPress Plugin miniOrange Discord Integration 访问控制错误漏洞	17 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-3082 miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling	17 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-42511	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3082	17 Oct 202212:15	–	nvd
Patchstack	WordPress miniOrange Discord Integration plugin <= 2.1.5 - Authenticated App Disabling vulnerability	26 Sep 202200:00	–	patchstack
Prion	Cross site request forgery (csrf)	17 Oct 202212:15	–	prion
Positive Technologies	PT-2022-20334 · Miniorange · Miniorange Discord Integration Wordpress Plugin	17 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3082	22 May 202523:10	–	redhatcve
Vulnrichment	CVE-2022-3082 miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling	17 Oct 202200:00	–	vulnrichment

NVD

Vulners

Node

miniorange discord_integrationRange<2.1.6wordpress

[
  {
    "vendor": "Unknown",
    "product": "miniOrange Discord Integration",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.1.6"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/a91d0501-c2a9-4c6c-b5da-b3fc29442a4f

Parameter	Position	Path	Description	CWE
action	request body	/wp-admin/admin-ajax.php	AJAX actions lack authorization/CSRF protection allowing logged-in users to trigger destructive actions (e.g., disable app) via admin-ajax.php	CWE-352, CWE-862
app_name	request body	/wp-admin/admin-ajax.php	AJAX actions lack authorization/CSRF protection allowing logged-in users to trigger destructive actions (e.g., disable app) via admin-ajax.php	CWE-352, CWE-862

13 May 2025 16:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00086

SSVC