CVE-2022-0833 - Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

Back Back to CVE browser

MEDIUM

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

Published Mar 28, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB data

Affected products

Vendor n/a Product Church Admin Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.4.135

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Church Admin

unaffected

Version	Status	Constraints
0	affected	<3.4.135

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-862

Missing Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15879
Advisory
https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d
exploitvdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15879		Advisory
https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d		exploitvdb-entrytechnical-descriptionThird Party Advisory