Lucene search

PatchstackVULNRICHMENT:CVE-2022-44581

HistoryMay 17, 2024 - 6:27 a.m.

CVE-2022-44581 WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability

2024-05-1706:27:07

CWE-922

Patchstack

github.com

cve-2022-44581

wordpress

defender security

broken authentication

insecure storage

wpmu dev

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wpmudev:defender_security:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "wpmudev",
    "product": "defender_security",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.3.2"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-3-3-2-broken-authentication-vulnerability?_s_id=cve