Lucene search
WPScanTeamPATCHSTACK:2F53B6724FEEB6E591F591E2FABCBCCCHistoryAug 16, 2022 - 12:00 a.m.
WordPress Affiliates Manager Plugin <= 2.9.13 - CSV Injection vulnerability
2022-08-1600:00:00
WPScanTeam
patchstack.com
5
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.0%
CSV Injection vulnerability discovered by WPScan in Affiliates Managers (versions <= 2.9.13)
Solution
Update the WordPress Affiliates Manager plugin to the latest available version (at least 2.9.14).
| CPE | Name | Operator | Version |
|---|---|---|---|
| affiliates manager | le | 2.9.13 |
Related
cve
cve
CVE-2022-2798
2022-09-16 09:15:10
prion
prion
Input validation
2022-09-16 09:15:00
wpvulndb
wpvulndb
Affiliates Manager < 2.9.14 - Affiliate CSV Injection
2022-08-16 00:00:00
nvd
nvd
CVE-2022-2798
2022-09-16 09:15:10
wpexploit
wpexploit
Affiliates Manager < 2.9.14 - Affiliate CSV Injection
2022-08-16 00:00:00
cvelist
cvelist
CVE-2022-2798 Affiliates Manager < 2.9.14 - Affiliate CSV Injection
2022-09-16 08:40:34
openvas
openvas
WordPress Affiliates Manager Plugin < 2.9.14 Multiple Vulnerabilities
2023-02-17 00:00:00
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.0%
Related for PATCHSTACK:2F53B6724FEEB6E591F591E2FABCBCCC