Lucene search
PatchstackCVE-2022-40128HistoryNov 08, 2022 - 7:15 p.m.
CVE-2022-40128
2022-11-0819:15:13
CWE-352
Patchstack
web.nvd.nist.gov
34
3
cve-2022-40128
cross-site request forgery
csrf
advanced order export
woocommerce
wordpress
vulnerability
nvd
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
31.4%
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.
Affected configurations
Node
algolplusadvanced_order_exportRange<3.3.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| algolplus | advanced_order_export | * | cpe:2.3:a:algolplus:advanced_order_export:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "AlgolPlus",
"product": "Advanced Order Export For WooCommerce (WordPress plugin)",
"versions": [
{
"version": "<= 3.3.2",
"status": "affected",
"lessThanOrEqual": "3.3.2",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
patchstack
patchstack
wpvulndb
wpvulndb
Advanced Order Export For WooCommerce < 3.3.3 - Export Files via CSRF
2022-10-20 00:00:00
nvd
nvd
CVE-2022-40128
2022-11-08 19:15:13
cvelist
cvelist
openvas
openvas
prion
prion
Cross site request forgery (csrf)
2022-11-08 19:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
31.4%
Related for CVE-2022-40128