Lucene search
Ptsfence (Patchstack Alliance)PATCHSTACK:C449A29A739423C82C58E45C8F4FD66DHistoryAug 31, 2022 - 12:00 a.m.
WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities
2022-08-3100:00:00
ptsfence (Patchstack Alliance)
patchstack.com
10
0.001 Low
EPSS
Percentile
40.4%
Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities were discovered by ptsfence (Patchstack Alliance) in the WordPress WP Shop plugin (versions <= 3.9.6).
Solution
Deactivate and delete. No reply from the vendor.
Related
nvd
nvd
CVE-2022-36793
2022-09-09 15:15:10
cve
cve
CVE-2022-36793
2022-09-09 15:15:10
cvelist
cvelist
wpvulndb
wpvulndb
WP Shop Original <= 3.9.6 - Unauthenticated Settings Update
2022-08-31 00:00:00
prion
prion
Design/Logic Flaw
2022-09-09 15:15:00