CVE-2022-1020

CRITICALNuclei

Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-1020 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 21, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Product Table for WooCommerce (wooproducttable)

CVE List3.0.2 to < 3.0.2*affected
3.1.2 to < 3.1.2affected

woo_product_table

Browse codeastrology / woo_product_table
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress WooCommerce <3.1.2 - Arbitrary Function CallCVSS 9.8

WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument.

Impact

It allows remote code execution on the affected system.

Remediation

Update WordPress WooCommerce plugin to version 3.1.2 or later to mitigate the vulnerability.

WeaknessesCWE-352
AuthorsAkincibor
Template tagscvecve2022wpscanwpwp-pluginwordpressunauthcodeastrologyvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:codeastrology:woo_product_table:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5 https://nvd.nist.gov/vuln/detail/CVE-2022-1020

Source: ProjectDiscovery

References

2