CVE-2022-4693
Published on: Not Yet Published
Last Modified on: 01/23/2023 05:17:00 PM UTC
Certain versions of User Verification from Unknown contain the following vulnerability:
The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.
- CVE-2022-4693 has been assigned by
[email protected] to track the vulnerability - Affected Vendor/Software: Unknown - User Verification version = 0
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| User Verification by PickPlugins WordPress plugin Authentication Bypass – Lana Codes | lana.codes text/html |
MISC lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957 |
| User Verification < 1.0.94 - Authentication Bypass WordPress Security Vulnerability | web.archive.org text/html Inactive LinkNot Archived |
MISC wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea |
There are currently no QIDs associated with this CVE
Known Affected Software
| Vendor | Product | Version |
|---|---|---|
| Unknown | User_Verification | = 0 |
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 @CVEreport |
CVE-2022-4693 : The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulner… twitter.com/i/web/status/1… | 2023-01-23 15:15:16 |
 /r/netcve |
CVE-2022-4693 | 2023-01-23 15:39:20 |