7.2

CVE-2022-3366

Exploit

PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection

PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection

The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site.
Mögliche Gegenmaßnahme
PublishPress Capabilities Pro: Update to version 2.5.2, or a newer patched version
PublishPress Capabilities: User Role Access Control, Admin Area Permissions: Update to version 2.5.2, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Publishpress ≫ Capabilities SwEdition - SwPlatform wordpress Version < 2.5.2
Publishpress ≫ Capabilities SwEdition pro SwPlatform wordpress Version < 2.5.2
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt PublishPress Capabilities Pro
Version *-2.5.1
SystemWordPress Plugin
≫
Produkt PublishPress Capabilities: User Role Access Control, Admin Area Permissions
Version *-2.5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.636
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://wpscan.com/vulnerability/72639924-e7a7-4f7d-bd50-015d05ffd4fb
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/6da7046e-2717-4a3c-bba9-88f27de29ede
Third Party Advisory