CVE-2022-4693

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957	Exploit Third Party Advisory
https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea	Exploit Third Party Advisory
https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957	Exploit Third Party Advisory
https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:pickplugins:user_verification:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:35

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-01-23 15:15

Updated : 2024-11-21 07:35

NVD link : CVE-2022-4693

Mitre link : CVE-2022-4693

CVE.ORG link : CVE-2022-4693

JSON object : View

Products Affected

pickplugins

user_verification

CWE

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2022-4693", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-01-23T15:15:16.190", "references": [{"url": "https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user\u2019s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website."}, {"lang": "es", "value": "El complemento User Verification de WordPress anterior a la versi\u00f3n 1.0.94 se vio afectado por una vulnerabilidad de seguridad de Auth Bypass. Para evitar la autenticaci\u00f3n, s\u00f3lo necesitamos saber el nombre de usuario del usuario. Dependiendo de qu\u00e9 nombre de usuario conozcamos, que se puede consultar f\u00e1cilmente porque normalmente son datos p\u00fablicos, es posible que incluso se nos asigne una funci\u00f3n administrativa en el sitio web."}], "lastModified": "2024-11-21T07:35:44.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pickplugins:user_verification:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "9AABDFAF-A75B-438D-AA4C-E1C2DA0D6745", "versionEndExcluding": "1.0.94"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}