CVE-2022-3861

2022-11-2112:45:46

Wordfence

www.cve.org

betheme

wordpress

php object injection

vulnerability

object injection

authentication

contributor permissions

pop chain

code execution

sensitive data

file deletion

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

61.3%

JSON

The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfn_builder_import, mfn_builder_import_page, importdata, importsinglepage, and importfromclipboard functions. This makes it possible for authenticated attackers, with contributor level permissions and above to inject a PHP Object. The additional presence of a POP chain would make it possible for attackers to execute code, retrieve sensitive data, delete files, etc…

CNA Affected

[
  {
    "vendor": "MuffinGroup",
    "product": "Betheme",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "26.5.1.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]