PT-2022-21873 · WordPress · Ultimate Member

Ruijie Li · Published 2022-11-29 · Updated 2023-06-29 · CVE-2022-3383

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Ultimate Member plugin for WordPress versions up to, and including, 2.5.0

Description The issue allows for Remote Code Execution via the get option value from callback function, which accepts user-supplied input and passes it through call user func(). This enables authenticated attackers with administrative capabilities to execute code on the server.

Recommendations For versions up to, and including, 2.5.0, update to a version later than 2.5.0 to resolve the issue. As a temporary workaround, consider restricting access to the get option value from callback function to minimize the risk of exploitation.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-3383

Affected Products

Ultimate Member

References · 10

• 🔥 https://github.com/H4de5-7/vulnerabilities/blob/main/CVE-2022-3383%20%26%26%20CVE-2022-3384.md · Exploit
• 🔥 https://yuque.com/docs/share/8796eef9-ac4c-4339-96b4-6c21313ecf3e · Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2805393%40ultimate-member&new=2805393%40ultimate-member&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-3383 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3383 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/ed28fe16-0835-4e94-a30e-305e7ba03740?source=cve · Note
• https://t.me/cvenotify/38899 · Telegram Post
• https://t.me/cvenotify/38714 · Telegram Post
• https://t.me/cibsecurity/53682 · Telegram Post
• https://wordfence.com/vulnerability-advisories-continued/#CVE-2022-3383 · Note