← Back

CVE-2022-4745

nvd nist
Published: Feb 13, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Exploitability: 2.8 / Impact: 4.2
Source: NVD

Description

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.

Affected (1)

Wp Customerarea
1 product
Wp Customer Area
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Wp Customer Area
Before 8.1.4

References (2)

Source: contact@wpscan.com
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.