Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.

 Verified

 Fixed

**10**

CVSS 3.1 score Critical severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 1.1.0

PSID 

e8ae40303ceb

Classification 

SQL Injection

OWASP Top 10 

A1: Injection

Required privilege 

Can be exploited remotely without any authentication.

Publicly disclosed

2022-10-28

**Details**

Arbitrary Code Execution vulnerability discovered by Dave Jong (Patchstack) in the WordPress Api2Cart Bridge Connector plugin (versions <= 1.1.0).

**Solution**

Update the WordPress Api2Cart Bridge Connector plugin to the latest available version (at least 1.2.0).

**References**

CVE-2022-42497: WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability - Patchstack

Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.

 Verified

 Fixed

**9.1**

CVSS 3.1 score Critical severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 3.6.15

PSID 

068462f3f616

Classification 

Arbitrary File Deletion

OWASP Top 10 

A6: Security Misconfiguration

Required privilege 

Can be exploited remotely without any authentication.

Publicly disclosed

2022-11-01

**Details**

Unauth. Arbitrary File Deletion vulnerability discovered by Dave Jong (Patchstack) in the WordPress WatchTowerHQ plugin (versions <= 3.6.15).

**Solution**

Update the WordPress WatchTowerHQ plugin to the latest available version (at least 3.6.16).

**References**

CVE-2022-44584: WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability - Patchstack

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress.

 Verified

 Fixed

**7.2**

CVSS 3.1 score High severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 9.7.1

PSID 

b88d2a5e1e31

Classification 

Other Vulnerability Type

OWASP Top 10 

A5: Broken Access Control

Required privilege 

Requires high role user authentication.

Publicly disclosed

2022-10-25

**Details**

Auth. WordPress Options Change vulnerability discovered by Vlad Vector (Patchstack) in the WordPress Image Hover Effects Ultimate plugin (versions <= 9.7.1).

**Solution**

Update the WordPress Image Hover Effects Ultimate plugin to the latest available version (at least 9.7.2).

**References**

CVE-2022-42459: WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability - Patchstack

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.

 Verified

 Fixed

**4.7**

CVSS 3.1 score Medium severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 7.3.10

PSID 

193de4e964ae

Classification 

Cross Site Scripting (XSS)

OWASP Top 10 

A7: Cross-Site Scripting (XSS)

Required privilege 

If "Require User Login" is set to "No" , the XSS will be unauth. If not it will need subscriber role user.

Publicly disclosed

2022-10-21

**Details**

Cross-Site Scripting (XSS) vulnerability discovered by Thura Moe Myint (Patchstack Alliance) in WordPress Quiz And Survey Master plugin (versions <= 7.3.10).

**Solution**

Update the WordPress Quiz And Survey Master plugin to the latest available version (at least 7.3.11).

**References**

CVE-2022-40698: WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability - Patchstack

Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress.

 Verified

 Fixed

**4.3**

CVSS 3.1 score Medium severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 2.76.0

PSID 

f9da12615bcc

Classification 

Other Vulnerability Type

OWASP Top 10 

A1: Injection

Required privilege 

Requires subscriber or higher role user authentication.

Publicly disclosed

2022-10-05

**Details**

Race Condition vulnerability leading to voting manipulation discovered by Nguy Minh Tuan (Patchstack Alliance) in the WordPress WP-Polls plugin (versions <= 2.76.0).

**Solution**

Update the WordPress WP-Polls plugin to the latest available version (at least 2.77.0).

**References**

CVE-2022-40130: WordPress WP-Polls plugin <= 2.76.0 - Race Condition vulnerability - Patchstack

Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings.

 Verified

 Fixed

**5.3**

CVSS 3.1 score Medium severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 1.6.2

PSID 

1054f2ff8a05

Classification 

Other Vulnerability Type

OWASP Top 10 

A5: Broken Access Control

Required privilege 

Can be exploited remotely without any authentication.

Publicly disclosed

2022-11-07

**Details**

Broken Access Control vulnerability leading to unauth. changing of Opt-In or Opt-Out tracking settings discovered by Nguyen Anh Tien (Patchstack Alliance) in the WordPress LoginPress plugin (versions <= 1.6.2).

**Solution**

Update the WordPress LoginPress plugin to the latest available version (at least 1.6.3).

**References**

CVE-2022-41839: WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability - Patchstack

Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

CVE-2022-41618: Media Library Assistant

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress.

 Verified

 Fixed

**6.1**

CVSS 3.1 score Medium severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 1.4.5

PSID 

18f5b72d7722

Classification 

Cross Site Request Forgery (CSRF)

OWASP Top 10 

A5: Broken Access Control

Publicly disclosed

2022-09-28

**Details**

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability was discovered by Nguy Minh Tuan (Patchstack Alliance) in the WordPress Store Locator plugin (versions <= 1.4.5).

**Solution**

Update the WordPress Store Locator WordPress plugin to the latest available version (at least 1.4.6).

**References**

CVE-2022-41615: WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability - Patchstack

Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.

 Verified

 Fixed

**6.5**

CVSS 3.1 score Medium severity

Report  

Monitoring Not reported to be exploited

Vulnerable versions

<= 2.6.9

PSID 

cec85aa7ac53

Classification 

Other Vulnerability Type

OWASP Top 10 

A5: Broken Access Control

Required privilege 

Can be exploited remotely without any authentication.

Publicly disclosed

2022-10-28

**Details**

Unauth. Plugin Settings Change vulnerability discovered by Nguyen Anh Tien (Patchstack Alliance) in the WordPress Modula plugin (versions <= 2.6.9).

**Solution**

Update the WordPress Modula Image Gallery plugin to the latest available version (at least 2.6.91).

**References**

CVE-2022-41135: WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerability - Patchstack

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress.

Tag

#wordpress