Lucene search
Dave Jong (Patchstack)PATCHSTACK:6D5A6A4498395D50D1BC3BB1E7FB7BDFHistoryOct 24, 2022 - 12:00 a.m.
WordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability
2022-10-2400:00:00
Dave Jong (Patchstack)
patchstack.com
24
wordpress searchwp
premium plugin
broken authentication
nonce token leakage
plugin settings
update
EPSS
0.001
Percentile
22.7%
Broken Authentication vulnerability via Nonce Token Leakage Leading to Plugin Settings Change discovered by Dave Jong (Patchstack) in the WordPress SearchWP premium plugin (versions <= 4.2.5).
Solution
Update the WordPress SearchWP plugin to the latest available version (at least 4.2.6).
Related
wpvulndb
wpvulndb
SearchWP < 4.2.6 - Subscriber+ Settings Update
2022-10-24 00:00:00
prion
prion
Authorization
2022-11-08 19:15:00
cve
cve
CVE-2022-40223
2022-11-08 19:15:14
cvelist
cvelist
nvd
nvd
CVE-2022-40223
2022-11-08 19:15:14