Lucene search

[email protected]CVE-2022-40700

HistoryJan 19, 2024 - 3:15 p.m.

CVE-2022-40700

2024-01-1915:15:08

CWE-918

[email protected]

web.nvd.nist.gov

cve-2022-40700

ssrf

vulnerability

wordpress

plugins

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.136 Low

EPSS

Percentile

95.6%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet – A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP – Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply – Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder – Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.

Affected configurations

Vulners

NVD

Node

montoniomontonio_for_woocommerceRange≤6.0.1

wpopalwpopal_core_featuresRange≤1.5.8

amo_for_wp_–_membership_managementarcstoneRange≤4.6.6

long_watch_studiowoovirtualwallet_–_a_virtual_wallet_for_woocommerceRange≤2.2.1

long_watch_studiowoovip_–_membership_plugin_for_wordpress_and_woocommerceRange≤1.4.4

long_watch_studiowoosupply_–_suppliers\,_supply_orders_and_stock_managementRange≤1.2.2

squidesmatheme_minifierRange≤2.0

paul_clarkstylesRange≤1.2.3

designmodo_inc.wordpress_page_builder_–_qardsRange≤1.0.5

philip_m._hofer_\(frumph\)phpfreechatRange≤0.2.8

arun_basil_lalcustom_login_admin_front-end_cssRange≤1.4.1

team_agence-presscss_adder_by_agence-pressRange≤1.5.0

unihostconfirm_dataRange≤1.0.7

deano1987amp_toolboxRange≤2.1.1

arun_basil_laladmin_css_muRange≤2.6

VendorProductVersionCPE
montoniomontonio_for_woocommerce*cpe:2.3:a:montonio:montonio_for_woocommerce:*:*:*:*:*:*:*:*
wpopalwpopal_core_features*cpe:2.3:a:wpopal:wpopal_core_features:*:*:*:*:*:*:*:*
squidesmatheme_minifier*cpe:2.3:a:squidesma:theme_minifier:*:*:*:*:*:*:*:*
unihostconfirm_data*cpe:2.3:a:unihost:confirm_data:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
montonio	montonio_for_woocommerce	*	cpe:2.3:a:montonio:montonio_for_woocommerce::::::::
wpopal	wpopal_core_features	*	cpe:2.3:a:wpopal:wpopal_core_features::::::::
squidesma	theme_minifier	*	cpe:2.3:a:squidesma:theme_minifier::::::::
unihost	confirm_data	*	cpe:2.3:a:unihost:confirm_data::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "montonio-for-woocommerce",
    "product": "Montonio for WooCommerce",
    "vendor": "Montonio",
    "versions": [
      {
        "changes": [
          {
            "at": "6.0.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "6.0.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wpopal-core-features",
    "product": "Wpopal Core Features",
    "vendor": "Wpopal",
    "versions": [
      {
        "lessThanOrEqual": "1.5.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-amo",
    "product": "ArcStone",
    "vendor": "AMO for WP – Membership Management",
    "versions": [
      {
        "lessThanOrEqual": "4.6.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovirtualwallet",
    "product": "WooVirtualWallet – A virtual wallet for WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "2.2.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovip",
    "product": "WooVIP – Membership plugin for WordPress and WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.4.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woosupply",
    "product": "WooSupply – Suppliers, Supply Orders and Stock Management",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.2.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "theme-minifier",
    "product": "Theme Minifier",
    "vendor": "Squidesma",
    "versions": [
      {
        "lessThanOrEqual": "2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "styles",
    "product": "Styles",
    "vendor": "Paul Clark",
    "versions": [
      {
        "lessThanOrEqual": "1.2.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "qards-free",
    "product": "WordPress Page Builder – Qards",
    "vendor": "Designmodo Inc.",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "phpfreechat",
    "product": "PHPFreeChat",
    "vendor": "Philip M. Hofer (Frumph)",
    "versions": [
      {
        "lessThanOrEqual": "0.2.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-login-admin-front-end-css-with-multisite-support",
    "product": "Custom Login Admin Front-end CSS",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "css-adder-by-agence-press",
    "product": "CSS Adder By Agence-Press",
    "vendor": "Team Agence-Press",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "confirm-data",
    "product": "Confirm Data",
    "vendor": "Unihost",
    "versions": [
      {
        "lessThanOrEqual": "1.0.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "amp-toolbox",
    "product": "AMP Toolbox",
    "vendor": "deano1987",
    "versions": [
      {
        "lessThanOrEqual": "2.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "admin-css-mu",
    "product": "Admin CSS MU",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/admin-css-mu/wordpress-admin-css-mu-plugin-2-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

patchstack.com/database/vulnerability/amp-toolbox/wordpress-amp-toolbox-plugin-2-1-1-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/confirm-data/wordpress-confirm-data-plugin-1-0-7-unauth-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

patchstack.com/database/vulnerability/css-adder-by-agence-press/wordpress-css-adder-by-agene-press-plugin-1-5-0-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/custom-login-admin-front-end-css-with-multisite-support/wordpress-custom-login-admin-front-end-css-plugin-1-4-1-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/montonio-for-woocommerce/wordpress-montonio-for-woocommerce-plugin-6-0-1-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/phpfreechat/wordpress-phpfreechat-plugin-0-2-8-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/qards-free/wordpress-wordpress-page-builder-qards-plugin-1-0-5-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/styles/wordpress-styles-plugin-1-2-3-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/theme-minifier/wordpress-theme-minifier-plugin-2-0-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/woosupply/wordpress-woosupply-plugin-1-2-2-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/woovip/wordpress-woovip-plugin-1-4-4-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/woovirtualwallet/wordpress-woovirtualwallet-plugin-2-2-1-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/wp-amo/wordpress-amo-for-wp-plugin-4-6-6-server-side-request-forgery-ssrf?_s_id=cve

patchstack.com/database/vulnerability/wpopal-core-features/wordpress-wpopal-core-features-plugin-1-5-7-server-side-request-forgery-ssrf?_s_id=cve

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.136 Low

EPSS

Percentile

95.6%

JSON

Related for CVE-2022-40700

prion1 nvd1 cvelist1 wordfence1