Lucene search

K
cve[email protected]CVE-2022-47593
HistoryJun 22, 2023 - 1:15 p.m.

CVE-2022-47593

2023-06-2213:15:09
CWE-89
web.nvd.nist.gov
12
cve-2022
sql injection
rapidload power-up
autoptimize plugin
security vulnerability

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin <=Β 1.6.35 versions.

Affected configurations

Vulners
NVD
Node
rapidloadrapidload_power-up_for_autoptimizeRange≀1.6.35
VendorProductVersionCPE
rapidloadrapidload_power\-up_for_autoptimize*cpe:2.3:a:rapidload:rapidload_power\-up_for_autoptimize:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "unusedcss",
    "product": "RapidLoad Power-Up for Autoptimize",
    "vendor": "RapidLoad",
    "versions": [
      {
        "changes": [
          {
            "at": "1.6.36",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.6.35",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%

Related for CVE-2022-47593