CVE-2022-40700

🗓️ 19 Jan 2024 15:15:08Reported by [email protected]Type

SSRF vulnerability in multiple WordPress plugins

Reporter	Title	Published	Views	Family All 27
Circl	CVE-2022-40700	15 Feb 202411:51	–	circl
CNNVD	WordPress plugin Admin CSS MU code issue vulnerability	19 Jan 202400:00	–	cnnvd
CVE	CVE-2022-40700	19 Jan 202414:30	–	cve
Cvelist	CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins	19 Jan 202414:30	–	cvelist
EUVD	EUVD-2022-43971	3 Oct 202520:07	–	euvd
OSV	CVE-2022-40700	19 Jan 202415:15	–	osv
Patchstack	WordPress Admin CSS MU Plugin <= 2.6 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress Confirm Data Plugin <= 1.0.7 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress WooVirtualWallet – A virtual wallet for WooCommerce Plugin <= 2.2.1 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack
Patchstack	WordPress WooVIP – Membership plugin for WordPress and WooCommerce Plugin <= 1.4.4 is vulnerable to Server Side Request Forgery (SSRF)	3 Mar 202300:00	–	patchstack

NVD

Node

millionclues admin_css_muRange≤2.6wordpress

Node

deano amp_toolboxRange≤2.1.1wordpress

Node

unihost confirm_dataRange≤1.0.7wordpress

Node

agence-press css_adderRange≤1.5.0wordpress

Node

millionclues custom_login_admin_front-end_cssRange≤1.4.1wordpress

Node

montonio montonio_for_woocommerceRange≤6.0.1wordpress

Node

frumph phpfreechatRange≤0.2.8wordpress

Node

designmodo qardsRange≤1.0.5wordpress

Node

paulclark stylesRange≤1.2.3wordpress

Node

squidesma theme_minifierRange≤2.0wordpress

Node

longwatchstudio woosupplyRange≤1.2.2wordpress

longwatchstudio woovipRange≤1.4.4wordpress

longwatchstudio woovirtualwalletRange≤2.2.1wordpress

Node

arcstone amo_for_wp_-_membership_managementRange≤4.6.6wordpress

Node

wpopal wpopal_core_featuresRange≤1.5.8wordpress

Source	Link
patchstack	www.patchstack.com/database/vulnerability/theme-minifier/wordpress-theme-minifier-plugin-2-0-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/custom-login-admin-front-end-css-with-multisite-support/wordpress-custom-login-admin-front-end-css-plugin-1-4-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/qards-free/wordpress-wordpress-page-builder-qards-plugin-1-0-5-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/css-adder-by-agence-press/wordpress-css-adder-by-agene-press-plugin-1-5-0-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/wpopal-core-features/wordpress-wpopal-core-features-plugin-1-5-7-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/phpfreechat/wordpress-phpfreechat-plugin-0-2-8-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/woovirtualwallet/wordpress-woovirtualwallet-plugin-2-2-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/montonio-for-woocommerce/wordpress-montonio-for-woocommerce-plugin-6-0-1-server-side-request-forgery-ssrf
patchstack	www.patchstack.com/database/vulnerability/admin-css-mu/wordpress-admin-css-mu-plugin-2-6-server-side-request-forgery-ssrf-vulnerability
patchstack	www.patchstack.com/database/vulnerability/amp-toolbox/wordpress-amp-toolbox-plugin-2-1-1-server-side-request-forgery-ssrf

17 Jun 2026 05:01Current

9Critical risk

Vulners AI Score9

CVSS 3.18.2 - 9.8

EPSS0.00999

SSVC

CWE-918