4.3

CVE-2022-0833

Exploit

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB data
Mögliche Gegenmaßnahme
Church Admin: Update to version 3.4.135, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Church Admin Project ≫ Church Admin SwPlatformwordpress Version < 3.4.135
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Church Admin
Version [*, 3.4.135)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.38
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/ab78f245-ab2d-4e9a-bd43-caa3afd1366b
Third Party Advisory