CVE-2022-3477

CRITICALNuclei

tagDiv Composer < 3.5 - Unauthenticated Account Takeover

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-3477 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 24, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 30, 2025 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

newsmag

Browse newsmag_project / newsmag
VulnCheckVersion data not supplied

Newsmag

Browse tagDiv / Newsmag
CVE List5.2.2 to < 5.2.2affected

Newspaper

Browse tagDiv / Newspaper
CVE List12.1 to < 12.1affected

tagDiv Composer

Browse tagDiv / tagDiv Composer
CVE List3.5 to < 3.5affected

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress tagDiv Composer < 3.5 - Authentication BypassCVSS 9.8

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address

Impact

Unauthenticated attackers who know a user's email address can bypass authentication through the Facebook login feature to gain complete access to any user account including administrator accounts on WordPress sites using tagDiv Composer.

Remediation

Fixed in 3.5

WeaknessesCWE-287
Authorsmelmathari
Template tagscvecve2022wordpresswp-pluginwpscanwpauth-bypasstagdivvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:newsmag_project:newsmag:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef https://nvd.nist.gov/vuln/detail/CVE-2022-3477

Source: ProjectDiscovery

References

2