Lucene search
HistoryNov 18, 2022 - 11:15 p.m.
CVE-2022-45073
cross-site request forgery
csrf
rest api authentication
wordpress
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.3%
Cross-Site Request Forgery (CSRF) vulnerability in REST API Authentication plugin <= 2.4.0 on WordPress.
Affected configurations
Node
miniorangewordpress_rest_api_authenticationRange≤2.4.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| miniorange | wordpress_rest_api_authentication | * | cpe:2.3:a:miniorange:wordpress_rest_api_authentication:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
REST API Authentication < 2.4.1 - Settings Update via CSRF
2022-11-09 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-18 23:15:00
cvelist
cvelist
patchstack
patchstack
cve
cve
CVE-2022-45073
2022-11-18 23:15:29
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.3%
Related for NVD:CVE-2022-45073