Lucene search
HistoryNov 18, 2022 - 7:15 p.m.
CVE-2022-41781
access control
permalink manager
wordpress
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.7%
Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress.
Affected configurations
Node
permalink_manager_lite_projectpermalink_manager_liteRange<2.2.20.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| permalink_manager_lite_project | permalink_manager_lite | * | cpe:2.3:a:permalink_manager_lite_project:permalink_manager_lite:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
wpvulndb
wpvulndb
Permalink Manager Lite < 2.2.20.1 - Unauthenticated URI Deletion
2022-11-01 00:00:00
prion
prion
Improper access control
2022-11-18 19:15:00
cnvd
cnvd
WordPress Permalink Manager Lite has an unspecified vulnerability
2022-11-23 00:00:00
cve
cve
CVE-2022-41781
2022-11-18 19:15:30
patchstack
patchstack
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.7%
Related for NVD:CVE-2022-41781