Lucene search

K
cvelistPatchstackCVELIST:CVE-2022-47605
HistoryApr 12, 2023 - 2:41 p.m.

CVE-2022-47605 WordPress Custom 404 Pro Plugin <= 3.7.0 is vulnerable to SQL Injection (SQLi)

2023-04-1214:41:14
CWE-89
Patchstack
www.cve.org
2
wordpress
custom 404 pro plugin
sql injection
vulnerability

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

24.4%

Auth. SQL Injection’) vulnerability in Kunal Nagar Custom 404 Pro plugin <=Β 3.7.0 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-404-pro",
    "product": "Custom 404 Pro",
    "vendor": "Kunal Nagar",
    "versions": [
      {
        "changes": [
          {
            "at": "3.7.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.7.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

24.4%

Related for CVELIST:CVE-2022-47605