CVE-2022-3180criticalexploração observadaCWE-290

WPGateway <= 3.5 - Unauthenticated Privilege Escalation

50Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Actcvss 9.8epss 9.2%

da publicação à arma

Publicada no NVD11 de fev.

VulnCheck13 de set.

probabilidade de exploração

9.2%top 5% das CVEs

exploração observada

simVulnCheck

The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5. This allows unauthenticated attackers to create arbitrary malicious administrator accounts.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Jack Hopman · WPGateway

Referências

https://www.wordfence.com/blog/2022/09/psa-zero-day-vulnerability-in-wpgateway-actively-exploited-in-the-wild/https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpgateway/wpgateway-35-unauthenticated-privilege-escalation