CVE-2022-4395

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

T

he Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

References

Link	Resource
https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40	Exploit Third Party Advisory
https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html
https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40	Exploit Third Party Advisory
https://www.exploit-db.com/exploits/51959

Configurations

Configuration 1 (hide)

cpe:2.3:a:wpswings:membership_for_woocommerce:*:*:*:*:*:wordpress:*:*

History

02 Dec 2024, 19:15

Type	Values Removed	Values Added
References		() https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html - () https://www.exploit-db.com/exploits/51959 -

21 Nov 2024, 07:35

Type	Values Removed	Values Added
References	~~() https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40 - Exploit, Third Party Advisory~~	() https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40 - Exploit, Third Party Advisory
Summary		(es) El complemento Membership For WooCommerce de WordPress anterior a 2.1.7 no valida los archivos cargados, lo que podría permitir a usuarios no autenticados cargar archivos arbitrarios, como código PHP malicioso, y lograr RCE.

Information

Published : 2023-01-30 21:15

Updated : 2025-03-27 20:15

NVD link : CVE-2022-4395

Mitre link : CVE-2022-4395

CVE.ORG link : CVE-2022-4395

JSON object : View

Products Affected

membership_for_woocommerce

CWE

No CWE.

{"id": "CVE-2022-4395", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-01-30T21:15:10.623", "references": [{"url": "https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/51959", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "descriptions": [{"lang": "en", "value": "The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE."}, {"lang": "es", "value": "El complemento Membership For WooCommerce de WordPress anterior a 2.1.7 no valida los archivos cargados, lo que podr\u00eda permitir a usuarios no autenticados cargar archivos arbitrarios, como c\u00f3digo PHP malicioso, y lograr RCE."}], "lastModified": "2025-03-27T20:15:17.083", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wpswings:membership_for_woocommerce:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "F9123425-3ECB-4666-AD84-CF313522611C", "versionEndExcluding": "2.1.7"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}