CVE-2022-4426

Published: Jan 9, 2023Modified: Apr 9, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.

Affected (1)

Products: Wpswings: Mautic Integration For Woocommerce

Wpswings

1 product

Mautic Integration For Woocommerce

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wpswings Mautic Integration For Woocommerce	Before 1.0.3

References (2)

https://wpscan.com/vulnerability/7d3d6b9c-d1c1-4e23-b891-7c72e4e89c38

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/7d3d6b9c-d1c1-4e23-b891-7c72e4e89c38

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.