Vulnerability Description
The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could also be done via a CSRF vector against any authenticated user
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gopostmatic | Replyable | < 2.2.10 |
Related Weaknesses (CWE)
References
- https://wpscan.com/vulnerability/095cba08-7edd-41fb-9776-da151c0885ddExploitThird Party Advisory
- https://wpscan.com/vulnerability/095cba08-7edd-41fb-9776-da151c0885ddExploitThird Party Advisory
FAQ
What is CVE-2022-4265?
CVE-2022-4265 is a vulnerability with a CVSS score of 8.8 (HIGH). The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the...
How severe is CVE-2022-4265?
CVE-2022-4265 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-4265?
Check the references section above for vendor advisories and patch information. Affected products include: Gopostmatic Replyable.