CVE-2022-3154

🗓️ 10 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 52 Views

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, allowing attackers to make logged-in Shop Managers and above perform unwanted action

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-3154	10 Oct 202221:15	–	attackerkb
CNNVD	WordPress plugin Woo Billingo Plus 跨站请求伪造漏洞	10 Oct 202200:00	–	cnnvd
CNVD	WordPress Woo Billingo Plus and Integration for Billingo & Gravity Forms Cross-Site Request Forgery Vulnerability	12 Oct 202200:00	–	cnvd
Cvelist	CVE-2022-3154 Multiple Plugins from Viszt Peter - Multiple CSRF	10 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-42578	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3154	10 Oct 202221:15	–	nvd
Patchstack	WordPress Woo Billingo Plus plugin <= 4.4.5.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities	14 Sep 202200:00	–	patchstack
Patchstack	WordPress Integration for Szamlazz.hu & Gravity Forms plugin <= 1.2.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities	14 Sep 202200:00	–	patchstack
Patchstack	WordPress Integration for Billingo & Gravity Forms plugin <= 1.0.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities	14 Sep 202200:00	–	patchstack
Prion	Cross site request forgery (csrf)	10 Oct 202221:15	–	prion

NVD

Vulners

Node

woo_billingo_plus_project woo_billingo_plusRange<4.4.5.4wordpress

Node

integration_for_billingo_&_gravity_forms_project integration_for_billingo_&_gravity_formsRange<1.0.4wordpress

Node

integration_for_szamlazz.hu_&_gravity_forms_project integration_for_szamlazz.hu_&_gravity_formsRange<1.2.7wordpress

[
  {
    "vendor": "TODO",
    "product": "Woo Billingo Plus",
    "versions": [
      {
        "version": "4.4.5.4",
        "status": "affected",
        "lessThan": "4.4.5.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "TODO",
    "product": "Integration for Billingo & Gravity Forms",
    "versions": [
      {
        "version": "1.0.4",
        "status": "affected",
        "lessThan": "1.0.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "TODO",
    "product": "Integration for Szamlazz.hu & Gravity Forms",
    "versions": [
      {
        "version": "1.2.7",
        "status": "affected",
        "lessThan": "1.2.7",
        "versionType": "custom"
      }
    ]
  }
]