CVE-2022-40216

2022-11-1823:15:20

[email protected]

web.nvd.nist.gov

cve-2022-40216

auth

subscriber+

messaging block bypass

better messages plugin

wordpress

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

19.5%

JSON

Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress.

Affected configurations

Vulners

NVD

Node

wordplusbetter_messagesRange≤1.9.10.69

VendorProductVersionCPE
wordplusbetter_messages*cpe:2.3:a:wordplus:better_messages:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordplus	better_messages	*	cpe:2.3:a:wordplus:better_messages::::::::

CNA Affected

[
  {
    "vendor": "WordPlus",
    "product": "Better Messages (WordPress plugin)",
    "versions": [
      {
        "version": "<= 1.9.10.69",
        "status": "affected",
        "lessThanOrEqual": "1.9.10.69",
        "versionType": "custom"
      }
    ]
  }
]