Lucene search
K

CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

🗓️ 19 Jan 2024 14:30:11Reported by PatchstackType 
cvelist
 cvelist
🔗 www.cve.org👁 16 Views

CVE-2022-40700 SSRF vulnerability in WordPress plugin

Related
Affected
Refs
[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "montonio-for-woocommerce",
    "product": "Montonio for WooCommerce",
    "vendor": "Montonio",
    "versions": [
      {
        "changes": [
          {
            "at": "6.0.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "6.0.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wpopal-core-features",
    "product": "Wpopal Core Features",
    "vendor": "Wpopal",
    "versions": [
      {
        "lessThanOrEqual": "1.5.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-amo",
    "product": "ArcStone",
    "vendor": "AMO for WP – Membership Management",
    "versions": [
      {
        "lessThanOrEqual": "4.6.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovirtualwallet",
    "product": "WooVirtualWallet – A virtual wallet for WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "2.2.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woovip",
    "product": "WooVIP – Membership plugin for WordPress and WooCommerce",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.4.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woosupply",
    "product": "WooSupply – Suppliers, Supply Orders and Stock Management",
    "vendor": "Long Watch Studio",
    "versions": [
      {
        "lessThanOrEqual": "1.2.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "theme-minifier",
    "product": "Theme Minifier",
    "vendor": "Squidesma",
    "versions": [
      {
        "lessThanOrEqual": "2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "styles",
    "product": "Styles",
    "vendor": "Paul Clark",
    "versions": [
      {
        "lessThanOrEqual": "1.2.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "qards-free",
    "product": "WordPress Page Builder – Qards",
    "vendor": "Designmodo Inc.",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "phpfreechat",
    "product": "PHPFreeChat",
    "vendor": "Philip M. Hofer (Frumph)",
    "versions": [
      {
        "lessThanOrEqual": "0.2.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-login-admin-front-end-css-with-multisite-support",
    "product": "Custom Login Admin Front-end CSS",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "css-adder-by-agence-press",
    "product": "CSS Adder By Agence-Press",
    "vendor": "Team Agence-Press",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "confirm-data",
    "product": "Confirm Data",
    "vendor": "Unihost",
    "versions": [
      {
        "lessThanOrEqual": "1.0.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "amp-toolbox",
    "product": "AMP Toolbox",
    "vendor": "deano1987",
    "versions": [
      {
        "lessThanOrEqual": "2.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "admin-css-mu",
    "product": "Admin CSS MU",
    "vendor": "Arun Basil Lal",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation