Lucene search
HistoryOct 17, 2022 - 12:15 p.m.
CVE-2022-3082
miniorange discord plugin
wordpress
authorization
csrf
ajax
unauthorized access
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example
Affected configurations
Node
miniorangediscord_integrationRange<2.1.6wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| miniorange | discord_integration | * | cpe:2.3:a:miniorange:discord_integration:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2022-10-17 12:15:00
cvelist
cvelist
cve
cve
CVE-2022-3082
2022-10-17 12:15:10
wpvulndb
wpvulndb
miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling
2022-09-26 00:00:00
patchstack
patchstack
wpexploit
wpexploit
miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling
2022-09-26 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
Related for NVD:CVE-2022-3082