CVE-2022-40700

🗓️ 19 Jan 2024 14:30:11Reported by PatchstackType

CVE-2022-40700 SSRF vulnerability in Various WordPress Plugin

Reporter	Title	Published	Views	Family All 26
Circl	CVE-2022-40700	15 Feb 202411:51	–	circl
CNNVD	WordPress plugin Admin CSS MU code issue vulnerability	19 Jan 202400:00	–	cnnvd
Cvelist	CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins	19 Jan 202414:30	–	cvelist
EUVD	EUVD-2022-43971	3 Oct 202520:07	–	euvd
NVD	CVE-2022-40700	19 Jan 202415:15	–	nvd
OSV	CVE-2022-40700	19 Jan 202415:15	–	osv
Patchstack	WordPress Admin CSS MU Plugin <= 2.6 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress Confirm Data Plugin <= 1.0.7 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress WooVirtualWallet – A virtual wallet for WooCommerce Plugin <= 2.2.1 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress WooVIP – Membership plugin for WordPress and WooCommerce Plugin <= 1.4.4 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack

NVD

Vulners

Node

millionclues admin_css_muRange≤2.6wordpress

Node

deano amp_toolboxRange≤2.1.1wordpress

Node

unihost confirm_dataRange≤1.0.7wordpress

Node

agence-press css_adderRange≤1.5.0wordpress

Node

millionclues custom_login_admin_front-end_cssRange≤1.4.1wordpress

Node

montonio montonio_for_woocommerceRange≤6.0.1wordpress

Node

frumph phpfreechatRange≤0.2.8wordpress

Node

designmodo qardsRange≤1.0.5wordpress

Node

paulclark stylesRange≤1.2.3wordpress

Node

squidesma theme_minifierRange≤2.0wordpress

Node

longwatchstudio woosupplyRange≤1.2.2wordpress

longwatchstudio woovipRange≤1.4.4wordpress

longwatchstudio woovirtualwalletRange≤2.2.1wordpress

Node

arcstone amo_for_wp_-_membership_managementRange≤4.6.6wordpress

Node

wpopal wpopal_core_featuresRange≤1.5.8wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "montonio-for-woocommerce",
    "product": "Montonio for WooCommerce",
    "vendor": "Montonio",
    "versions": [
      {
        "changes": [
          {
            "at": "6.0.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "6.0.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wpopal-core-features",
    "product": "Wpopal Core Features",
    "vendor": "Wpopal",
    "versions": [
      {
        "lessThanOrEqual": "1.5.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-amo",
    "product": "ArcStone",
    "vendor": "AMO for WP – Membership Management",
    "versions": [
      {
        "lessThanOrEqual": "4.6.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovirtualwallet",
    "product": "WooVirtualWallet – A virtual wallet for WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "2.2.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovip",
    "product": "WooVIP – Membership plugin for WordPress and WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.4.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woosupply",
    "product": "WooSupply – Suppliers, Supply Orders and Stock Management",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.2.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "theme-minifier",
    "product": "Theme Minifier",
    "vendor": "Squidesma",
    "versions": [
      {
        "lessThanOrEqual": "2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "styles",
    "product": "Styles",
    "vendor": "Paul Clark",
    "versions": [
      {
        "lessThanOrEqual": "1.2.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "qards-free",
    "product": "WordPress Page Builder – Qards",
    "vendor": "Designmodo Inc.",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "phpfreechat",
    "product": "PHPFreeChat",
    "vendor": "Philip M. Hofer (Frumph)",
    "versions": [
      {
        "lessThanOrEqual": "0.2.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-login-admin-front-end-css-with-multisite-support",
    "product": "Custom Login Admin Front-end CSS",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "css-adder-by-agence-press",
    "product": "CSS Adder By Agence-Press",
    "vendor": "Team Agence-Press",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "confirm-data",
    "product": "Confirm Data",
    "vendor": "Unihost",
    "versions": [
      {
        "lessThanOrEqual": "1.0.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "amp-toolbox",
    "product": "AMP Toolbox",
    "vendor": "deano1987",
    "versions": [
      {
        "lessThanOrEqual": "2.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "admin-css-mu",
    "product": "Admin CSS MU",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/montonio-for-woocommerce/wordpress-montonio-for-woocommerce-plugin-6-0-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/amp-toolbox/wordpress-amp-toolbox-plugin-2-1-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/wpopal-core-features/wordpress-wpopal-core-features-plugin-1-5-7-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/confirm-data/wordpress-confirm-data-plugin-1-0-7-unauth-server-side-request-forgery-ssrf-vulnerability
patchstack	www.patchstack.com/database/vulnerability/phpfreechat/wordpress-phpfreechat-plugin-0-2-8-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/css-adder-by-agence-press/wordpress-css-adder-by-agene-press-plugin-1-5-0-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/theme-minifier/wordpress-theme-minifier-plugin-2-0-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/woovirtualwallet/wordpress-woovirtualwallet-plugin-2-2-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/admin-css-mu/wordpress-admin-css-mu-plugin-2-6-server-side-request-forgery-ssrf-vulnerability
patchstack	www.patchstack.com/database/vulnerability/styles/wordpress-styles-plugin-1-2-3-server-side-request-forgery-ssrf

17 Jun 2026 05:01Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.2 - 9.8

EPSS0.00999

SSVC

CWE-918