by Kastro
Paper/Archive/CVE-2022-1020

CVE-2022-1020

Unknown Product Table for WooCommerce (wooproducttable) — Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call

EPSS 26%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.0.980 × 2019.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument

Affected

ProductAffectedFixed inSource
Product Table for WooCommerce (wooproducttable)3.0.2 – < 3.0.2*3.0.2*CNA
Product Table for WooCommerce (wooproducttable)3.1.2 – < 3.1.23.1.2CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5