CVE-2022-33198

CRITICALNuclei

WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-33198 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 30, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Accordions (WordPress plugin)

Browse Biplob Adhikari / Accordions (WordPress plugin)
CVE List<= 2.0.2 to ≤ 2.0.2affected

accordions

Browse oxilab / accordions
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Accordions - Unauthenticated Settings UpdateCVSS 9.8

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

Impact

Attackers can modify plugin options, potentially leading to site defacement, functionality disruption, or further exploitation.

Remediation

Update to the latest version of the plugin where the issue is fixed.

WeaknessesCWE-264
Authorsriteshs4hu
Template tagscve2022cvewp-pluginwpwordpressunauthaccordionsvulnvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:oxilab:accordions:*:*:*:*:*:wordpress:*:*
https://vdp.patchstack.com/database/wordpress/plugin/accordions-or-faqs/vulnerability/wordpress-accordions-plugin-2-0-2-unauthenticated-wordpress-options-change-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-33198 https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-2-unauthenticated-wordpress-options-change-vulnerability https://wordpress.org/plugins/accordions-or-faqs/#developers

Source: ProjectDiscovery

References

3