PT-2022-22760 · WordPress · Role Based Pricing For Woocommerce

Published 2022-11-07 · Updated 2022-11-10 · CVE-2022-3536

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Role Based Pricing for WooCommerce WordPress plugin versions prior to 1.6.3

Description The issue concerns a lack of authorization and proper CSRF checks, as well as inadequate validation of paths provided via user input. This allows authenticated users, such as subscribers, to perform PHAR deserialization attacks if they can upload a file and a suitable gadget chain is present on the blog.

Recommendations For versions prior to 1.6.3, update to version 1.6.3 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities for authenticated users like subscribers to minimize the risk of exploitation.

Exploit

Fix

Deserialization of Untrusted Data

CSRF

Weakness Enumeration

CWE-502

CWE-352

Related Identifiers

CVE-2022-3536

Affected Products

Role Based Pricing For Woocommerce

References · 5

• 🔥 https://wpscan.com/vulnerability/6af63aab-b7a6-4ef6-8604-4b4b99467a34 · Exploit
• https://osv.dev/vulnerability/CVE-2022-3536 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3536 · Security Note
• https://t.me/cvenotify/37478 · Telegram Post
• https://t.me/cvenotify/37172 · Telegram Post