PT-2023-13313 · WordPress · Wpqa Builder

H4R5H_T4Nd37 + 1 · Publicado 2023-01-09 · Atualizado 2023-03-17 · CVE-2022-3343

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WPQA Builder WordPress plugin versions prior to 5.9.3

Description The issue arises from incorrect validation in the wpqa following you ajax action, allowing a user to inflate their score by receiving repeated follow actions from another user. This can be exploited by having another user send multiple follow requests.

Recommendations For WPQA Builder WordPress plugin versions prior to 5.9.3, update to version 5.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the wpqa following you ajax action to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2022-3343

Produtos afetados

Wpqa Builder

Referências · 5

• 🔥 https://wpscan.com/vulnerability/e507b1b5-1a56-4b2f-b7e7-e22f6da1e32a · Exploit
• https://t.me/cibsecurity/56201 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-3343 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-3343 · Aviso do Fabricante
• https://t.me/cvenotify/41646 · Publicação no Telegram