CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/11/08 7:15 p.m.•34 views

CVE-2022-40223

Nonce token leakage and missing authorization in SearchWP premium plugin = 4.2.5 on WordPress leading to plugin settings change...

5.4CVSS0.00443EPSS

Exploits0References2

Vulnrichment•added 2022/11/08 6:20 p.m.•6 views

CVE-2022-40223 WordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability

Nonce token leakage and missing authorization in SearchWP premium plugin = 4.2.5 on WordPress leading to plugin settings change...

5.4CVSS5.4AI score0.00443EPSS

Exploits0References2

CVE•added 2022/11/08 6:20 p.m.•82 views

CVE-2022-40223

Summary: CVE-2022-40223 affects the WordPress SearchWP premium plugin (versions ≤ 4.2.5). The vulnerability combines nonce token leakage with missing authorization, enabling changes to plugin settings without proper privileges. Multiple sources corroborate the issue and its impact on plugin setti...

5.4CVSS4.7AI score0.00443EPSS

Exploits0References2Affected Software1