Lucene search

PatchstackCVE-2022-29435

HistoryMay 17, 2022 - 8:15 p.m.

CVE-2022-29435

2022-05-1720:15:09

CWE-352

Patchstack

web.nvd.nist.gov

cve

2022

29435

csrf

vulnerability

code snippets extended plugin

wordpress

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.001

Percentile

20.8%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann’s Code Snippets Extended plugin <= 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets.

Affected configurations

Nvd

Vulners

Node

code_snippets_extended_projectcode_snippets_extendedRange≤1.4.7wordpress

VendorProductVersionCPE
code_snippets_extended_projectcode_snippets_extended*cpe:2.3:a:code_snippets_extended_project:code_snippets_extended:*:*:*:*:*:*:wordpress:*

Vendor	Product	Version	CPE
code_snippets_extended_project	code_snippets_extended	*	cpe:2.3:a:code_snippets_extended_project:code_snippets_extended:::::::wordpress:*

CNA Affected

[
  {
    "product": "Code Snippets Extended (WordPress plugin)",
    "vendor": "Alexander Stokmann",
    "versions": [
      {
        "lessThanOrEqual": "1.4.7",
        "status": "affected",
        "version": "<= 1.4.7",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/code-snippets-extended/wordpress-code-snippets-extended-plugin-1-4-7-cross-site-request-forgery-csrf-vulnerability

wordpress.org/plugins/code-snippets-extended/#developers

Social References

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.001

Percentile

20.8%

JSON

Related for CVE-2022-29435