PT-2023-14645 · WordPress · Betheme

Dave Jong · Published 2023-01-14 · Updated 2023-01-24 · CVE-2022-45353

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Betheme theme version 26.6.1 and earlier

Description The issue is related to Broken Access Control in the Betheme theme on WordPress.

Recommendations For Betheme theme version 26.6.1 and earlier, update to a version later than 26.6.1 to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-45353

Affected Products

Betheme

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-45353 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45353 · Vendor Advisory
• https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability?_s_id=cve · Note