Lucene search
PatchstackCVE-2022-42698HistoryNov 18, 2022 - 11:15 p.m.
CVE-2022-42698
2022-11-1823:15:28
CWE-434
Patchstack
web.nvd.nist.gov
44
7
cve-2022-42698
unauthenticated
arbitrary file upload
wordpress
api2cart
bridge connector
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
64.7%
Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.
Affected configurations
Node
api2cartapi2cart_bridge_connectorMatch1.0.0wordpress
ORapi2cartapi2cart_bridge_connectorMatch1.1.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| api2cart | api2cart_bridge_connector | 1.0.0 | cpe:2.3:a:api2cart:api2cart_bridge_connector:1.0.0:*:*:*:*:wordpress:*:* |
| api2cart | api2cart_bridge_connector | 1.1.0 | cpe:2.3:a:api2cart:api2cart_bridge_connector:1.1.0:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "API2Cart",
"product": "Api2Cart Bridge Connector (WordPress plugin)",
"versions": [
{
"version": "<= 1.1.0",
"status": "affected",
"lessThanOrEqual": "1.1.0",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
wpvulndb
wpvulndb
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload
2022-10-28 00:00:00
patchstack
patchstack
cvelist
cvelist
nvd
nvd
CVE-2022-42698
2022-11-18 23:15:28
prion
prion
Design/Logic Flaw
2022-11-18 23:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
64.7%
Related for CVE-2022-42698