Security Advisory

CVE-2022-4872

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-30 20:31:34

Last updated 2025-03-27 20:05:55

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set arbitrary options to 'no'

← Browse all CVEs View on cve.org ↗