CVE-2022-4693
Summary
| CVE | CVE-2022-4693 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-01-23 15:15:00 UTC |
| Updated | 2023-11-07 03:58:00 UTC |
| Description | The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website. |
Risk And Classification
Problem Types: CWE-522
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pickplugins | User Verification | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| User Verification by PickPlugins WordPress plugin Authentication Bypass – Lana Codes | MISC | lana.codes | |
| User Verification < 1.0.94 - Authentication Bypass WordPress Security Vulnerability | MISC | wpscan.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.