Lucene search

PatchstackCVELIST:CVE-2022-45077

HistoryNov 17, 2022 - 12:00 a.m.

CVE-2022-45077 WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability

2022-11-1700:00:00

Patchstack

www.cve.org

wordpress

betheme

object injection

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress.

CNA Affected

[
  {
    "vendor": "Muffingroup",
    "product": "Betheme (WordPress theme)",
    "versions": [
      {
        "version": "<= 26.5.1.4",
        "status": "affected",
        "lessThanOrEqual": "26.5.1.4",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-5-1-4-auth-php-object-injection-vulnerability?_s_id=cve

themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048