Lucene search
HistoryAug 23, 2022 - 4:15 p.m.
CVE-2022-36389
cve-2022-36389
cross-site request forgery
csrf
wordplus better messages
wordpress
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress.
Affected configurations
Node
wordplusbetter_messagesRange≤1.9.9.148
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wordplus | better_messages | * | cpe:2.3:a:wordplus:better_messages:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Better Messages (WordPress plugin)",
"vendor": "WordPlus",
"versions": [
{
"lessThanOrEqual": "1.9.9.148",
"status": "affected",
"version": "<= 1.9.9.148",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
nvd
nvd
CVE-2022-36389
2022-08-23 16:15:11
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2022-08-23 16:15:00
cvelist
cvelist
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2022-36389