Vulners
Lucene search
CVE-2022-4872
šļøĀ 30 Jan 2023Ā 20:31:34Reported byĀ WPScanTypeĀ 
Ā cvešĀ web.nvd.nist.govšĀ 58Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2022-4872 | 27 Mar 202520:27 | ā | circl |
 | WordPress plugin Chained Products å®å Øę¼ę“ | 30 Jan 202300:00 | ā | cnnvd |
 | CVE-2022-4872 WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no' | 30 Jan 202320:31 | ā | cvelist |
 | EUVD-2022-52132 | 3 Oct 202520:07 | ā | euvd |
 | CVE-2022-4872 | 30 Jan 202321:15 | ā | nvd |
 | CVE-2022-4872 | 30 Jan 202321:15 | ā | osv |
 | WordPress WooCommerce Chained Products Plugin < 2.12.0 is vulnerable to Broken Access Control | 4 Jan 202300:00 | ā | patchstack |
 | Cross site request forgery (csrf) | 30 Jan 202321:15 | ā | prion |
 | CVE-2022-4872 | 23 May 202500:31 | ā | redhatcve |
 | CVE-2022-4872 WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no' | 30 Jan 202320:31 | ā | vulnrichment |
10
Node
[
{
"vendor": "Unknown",
"product": "Chained Products",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.12.0"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| cp_dismiss_admin_notice | query param | /wp-admin/admin-post.php?cp_dismiss_admin_notice=1&option_name=blogname | Unauthenticated attacker can trigger option update via admin-post.php, bypassing authorization/CSRF checks to set arbitrary plugin options (e.g., blogname) to 'no' | CWE-862,Ā CWE-352 |
| option_name | query param | /wp-admin/admin-post.php?cp_dismiss_admin_notice=1&option_name=blogname | Unauthenticated attacker can trigger option update via admin-post.php, bypassing authorization/CSRF checks to set arbitrary plugin options (e.g., blogname) to 'no' | CWE-862,Ā CWE-352 |
| blogname | query param | /wp-admin/admin-post.php?cp_dismiss_admin_notice=1&option_name=blogname | Unauthenticated attacker can trigger option update via admin-post.php, bypassing authorization/CSRF checks to set arbitrary plugin options (e.g., blogname) to 'no' | CWE-862,Ā CWE-352 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:22Current
4.8Medium risk
Vulners AI Score4.8
CVSS 3.14.3
EPSS0.00281
SSVC