CVE-2022-4266 — MEDIUM (6.5)

Q: How severe is CVE-2022-4266?

CVE-2022-4266 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-4266?

Check the references section above for vendor advisories and patch information. Affected products include: Speakdigital Bulk Delete Users By Email.

Vulnerability Description

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Speakdigital	Bulk Delete Users By Email	<= 1.2

References

https://wpscan.com/vulnerability/1bcda9d3-c573-441e-828f-055fbec2e08dExploitThird Party Advisory
https://wpscan.com/vulnerability/1bcda9d3-c573-441e-828f-055fbec2e08dExploitThird Party Advisory

FAQ

What is CVE-2022-4266?

CVE-2022-4266 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their ...

How severe is CVE-2022-4266?

CVE-2022-4266 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-4266?

Check the references section above for vendor advisories and patch information. Affected products include: Speakdigital Bulk Delete Users By Email.