by Kastro
Paper/Archive/CVE-2022-3477

CVE-2022-3477

tagDiv tagDiv Composer — tagDiv Composer < 3.5 - Unauthenticated Account Takeover

EPSS 4%public exploitCVSS 9.8
critical.is priorityof 100
58
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 90.3.903 × 2018.1Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address

Affected

ProductAffectedFixed inSource
tagDiv Composer3.5 – < 3.53.5CNA
Newspaper12.1 – < 12.112.1CNA
Newsmag5.2.2 – < 5.2.25.2.2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refwpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef