PT-2022-20334 · Miniorange · Miniorange Discord Integration Wordpress Plugin

Lana Codes · Published 2022-10-17 · Updated 2025-05-13 · CVE-2022-3082

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions miniOrange Discord Integration WordPress plugin versions prior to 2.1.6

Description The issue concerns a lack of authorization and CSRF protection in certain AJAX actions of the plugin, allowing any logged-in user, such as a subscriber, to call these actions and potentially disable the app.

Recommendations For versions prior to 2.1.6, update to version 2.1.6 or later to resolve the issue.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2022-3082

Affected Products

Miniorange Discord Integration Wordpress Plugin

References · 5

• 🔥 https://wpscan.com/vulnerability/a91d0501-c2a9-4c6c-b5da-b3fc29442a4f · Exploit
• https://osv.dev/vulnerability/CVE-2022-3082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3082 · Security Note
• https://t.me/cvenotify/121967 · Telegram Post
• https://t.me/cvenotify/55016 · Telegram Post