Lucene search

PatchstackCVE-2022-47605

HistoryApr 12, 2023 - 3:15 p.m.

CVE-2022-47605

2023-04-1215:15:11

CWE-89

Patchstack

web.nvd.nist.gov

cve-2022-47605

auth

sql injection

kunal nagar

custom 404 pro plugin

vulnerability

nvd

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

24.4%

JSON

Auth. SQL Injection’) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.7.0 versions.

Affected configurations

Nvd

Vulners

Node

kunalnagarcustom_404_proRange≤3.7.0wordpress

VendorProductVersionCPE
kunalnagarcustom_404_pro*cpe:2.3:a:kunalnagar:custom_404_pro:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
kunalnagar	custom_404_pro	*	cpe:2.3:a:kunalnagar:custom_404_pro::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-404-pro",
    "product": "Custom 404 Pro",
    "vendor": "Kunal Nagar",
    "versions": [
      {
        "changes": [
          {
            "at": "3.7.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.7.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/custom-404-pro/wordpress-custom-404-pro-plugin-3-7-0-admin-sql-injection-vulnerability?_s_id=cve

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

24.4%

JSON

Related for CVE-2022-47605