Lucene search

PatchstackCVE-2022-41609

HistoryNov 19, 2022 - 12:15 a.m.

CVE-2022-41609

2022-11-1900:15:30

CWE-918

Patchstack

web.nvd.nist.gov

cve-2022-41609

authorization

ssrf

better messages

wordpress

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.

Affected configurations

Nvd

Vulners

Node

wordplusbetter_messagesRange<1.9.10.69wordpress

VendorProductVersionCPE
wordplusbetter_messages*cpe:2.3:a:wordplus:better_messages:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wordplus	better_messages	*	cpe:2.3:a:wordplus:better_messages::::::wordpress::*

CNA Affected

[
  {
    "vendor": "WordPlus",
    "product": "Better Messages (WordPress plugin)",
    "versions": [
      {
        "version": "<= 1.9.10.68",
        "status": "affected",
        "lessThanOrEqual": "1.9.10.68",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

wordpress.org/plugins/bp-better-messages/#developers

Social References

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2022-41609