CVE-2022-2123 - WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF

Back Back to CVE browser

MEDIUM

WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF

Published Jul 11, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

Affected products

Vendor n/a Product WP Opt-in Default
n/a
- Version
  1.4.1
  Status
  affected
  Constraints
  <=1.4.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

WP Opt-in

n/a

Version	Status	Constraints
1.4.1	affected	<=1.4.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34409
Advisory
https://wpscan.com/vulnerability/46b634f6-92bc-4e00-a4c0-c25135c61922
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34409		Advisory
https://wpscan.com/vulnerability/46b634f6-92bc-4e00-a4c0-c25135c61922		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Jul 11, 2022

Updated Aug 3, 2024

Reserved Jun 18, 2022

Link CVE-2022-2123

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2123

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-2123

ENISA EUVD

Assigner WPScan

Published Jul 11, 2022

Updated Aug 3, 2024

Exploited since n/a

Link EUVD-2022-34409

EUVD-2022-34409