Lucene search
WPScanCVELIST:CVE-2022-4239HistoryDec 26, 2022 - 12:28 p.m.
CVE-2022-4239 Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
2022-12-2612:28:20
WPScan
www.cve.org
cve-2022-4239
workreap
wordpress theme
arbitrary posts deletion
idor
security vulnerability
0.001 Low
EPSS
Percentile
23.5%
The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the workreap_addons_service_remove action, allowing any user to delete any post by knowing or guessing the id.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Workreap",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.6.4"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2022-4239
2022-12-26 13:15:13
prion
prion
Heap overflow
2022-12-26 13:15:00
wpvulndb
wpvulndb
Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
2022-12-02 00:00:00
nvd
nvd
CVE-2022-4239
2022-12-26 13:15:13
wpexploit
wpexploit
Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
2022-12-02 00:00:00