4.3
CVE-2022-29417
- EPSS 0.6%
- Veröffentlicht 25.04.2022 17:15:37
- Zuletzt bearbeitet 21.11.2024 06:59:02
- Quelle audit@patchstack.com
- CVE-Watchlists
- Unerledigt
LoginWordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability
ShortPixel Adaptive Images <= 3.3.1 - Subscriber+ Arbitrary Settings Update
Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.
Mögliche Gegenmaßnahme
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization: Update to version 3.4.0, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Shortpixel ≫ Shortpixel Adaptive Images SwPlatformwordpress Version <= 3.3.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
Version
*-3.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.6% | 0.437 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
| audit@patchstack.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://patchstack.com/database/vulnerability/shortpixel-adaptive-images/wordpress-shortpixel-adaptive-images-plugin-3-3-1-subscriber-plugin-settings-update-vulnerability
https://wordpress.org/plugins/shortpixel-adaptive-images/#developers
https://www.wordfence.com/threat-intel/vulnerabilities/id/179751c8-a634-4a2e-be29-46be0aad79c8