Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitWpvulndbWPEX-ID:C76A1C0B-8A5B-4639-85B6-9EEBC63C3AA6
HistoryJan 04, 2023 - 12:00 a.m.

WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'

2023-01-0400:00:00
wpvulndb
67
woocommerce
chained products
unauthenticated
arbitrary
options
update

EPSS

0.001

Percentile

40.0%

JSON

The plugin does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set arbitrary options to ‘no’

As unauthenticated, open the following URL to set the Blog Name to 'no': https://example.com/wp-admin/admin-post.php?cp_dismiss_admin_notice=1&option_name=blogname

Related

prion 1
nvd 1
wpvulndb 1
cvelist 1
cve 1
prion
prion
Cross site request forgery (csrf)
2023-01-30 21:15:00
nvd
nvd
CVE-2022-4872
2023-01-30 21:15:12
wpvulndb
wpvulndb
WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'
2023-01-04 00:00:00
cvelist
cvelist
CVE-2022-4872 WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'
2023-01-30 20:31:34
cve
cve
CVE-2022-4872
2023-01-30 21:15:12

EPSS

0.001

Percentile

40.0%

JSON
Related for WPEX-ID:C76A1C0B-8A5B-4639-85B6-9EEBC63C3AA6
prion1nvd1wpvulndb1cvelist1cve1