Paper/Archive/CVE-2022-36793

CVE-2022-36793

wp-shop.ru WP Shop (WordPress plugin) — WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities

EPSS 0.9%CVSS 9.1

critical.is priorityof 100

39

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 60.2.602 × 2012.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress.

Affected

ProductAffectedFixed inSource

WP Shop (WordPress plugin)<= 3.9.6 – 3.9.6–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Patchstack (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refpatchstack.com/database/vulnerability/wp-shop-original/wordpress-wp-shop-plugin-3-9-6-unauthenticated-plugin-settings-change-data-deletion-vulnerabilities/_s_id=cve refwordpress.org/plugins/wp-shop-original