PT-2022-27402 · WordPress · Betheme

Dave Jong · Published 2022-11-17 · Updated 2022-11-18 · CVE-2022-45077

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Betheme theme versions <= 26.5.1.4

Description The issue is related to an authentication bypass vulnerability, specifically a PHP Object Injection vulnerability, affecting the Betheme theme on WordPress. It requires authentication as a subscriber or higher to exploit.

Recommendations For Betheme theme versions <= 26.5.1.4, update to a version higher than 26.5.1.4 to resolve the issue.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2022-45077

Affected Products

Betheme

References · 4

• https://osv.dev/vulnerability/CVE-2022-45077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45077 · Security Note
• https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-5-1-4-auth-php-object-injection-vulnerability?_s_id=cve · Note
• https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048 · Note