CVE-2022-3805

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-3805
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the MailChimp API key, global styles, 404 page settings, and enabled elements.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= Exploit Third Party Advisory
https://wordpress.org/plugins/jeg-elementor-kit/#developers Product Release Notes Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/c9955d65-afb3-4d28-abd2-9f2fec92d013 Third Party Advisory
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= Exploit Third Party Advisory
https://wordpress.org/plugins/jeg-elementor-kit/#developers Product Release Notes Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/c9955d65-afb3-4d28-abd2-9f2fec92d013 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jegtheme:jeg_elementor_kit:*:*:*:*:*:wordpress:*:*
History

21 Nov 2024, 07:20

Type Values Removed Values Added
Summary
  • (es) El complemento Jeg Elementor Kit para WordPress es vulnerable a la omisión de autorización en varias funciones utilizadas para actualizar la configuración del complemento en versiones hasta la 2.5.6 incluida. Los usuarios no autenticados pueden utilizar un nonce fácilmente disponible, obtenido de las páginas editadas por el complemento, para actualizar la clave API de MailChimp, los estilos globales, la configuración de la página 404 y los elementos habilitados.
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 8.6
References () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= - Exploit, Third Party Advisory () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= - Exploit, Third Party Advisory
References () https://wordpress.org/plugins/jeg-elementor-kit/#developers - Product, Release Notes, Third Party Advisory () https://wordpress.org/plugins/jeg-elementor-kit/#developers - Product, Release Notes, Third Party Advisory
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/c9955d65-afb3-4d28-abd2-9f2fec92d013 - Third Party Advisory () https://www.wordfence.com/threat-intel/vulnerabilities/id/c9955d65-afb3-4d28-abd2-9f2fec92d013 - Third Party Advisory
Information

Published : 2022-12-22 21:15

Updated : 2024-11-21 07:20

NVD link : CVE-2022-3805

Mitre link : CVE-2022-3805

CVE.ORG link : CVE-2022-3805

JSON object : View

Products Affected

jegtheme

  • jeg_elementor_kit
CWE

No CWE.