Lucene search
PatchstackCVE-2022-46797HistoryMar 01, 2023 - 2:15 p.m.
CVE-2022-46797
2023-03-0114:15:16
CWE-352
Patchstack
web.nvd.nist.gov
26
cve-2022-46797
csrf
vulnerability
conversios
google analytics
pixels
product feed manager
woocommerce
plugin
nvd
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
21.4%
Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce plugin <= 5.2.3 leads to plugin settings change.
Affected configurations
Node
tatvicconversios.ioRange<5.2.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tatvic | conversios.io | * | cpe:2.3:a:tatvic:conversios.io:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "enhanced-e-commerce-for-woocommerce-store",
"product": "All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce",
"vendor": "Conversios",
"versions": [
{
"changes": [
{
"at": "5.2.4",
"status": "unaffected"
}
],
"lessThanOrEqual": "5.2.3",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2023-03-01 14:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-46797
2023-03-01 14:15:16
wpvulndb
wpvulndb
Conversios.io < 5.2.4 - Settings Update via CSRF
2023-02-06 00:00:00
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
21.4%
Related for CVE-2022-46797