PT-2023-14646 · Thimpress · Thimpress Wp Pipes

·

CVE-2022-45355

·

Publicado

2023-03-29

·

Atualizado

2023-04-06

CVSS v3.1

8.2

Alta

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions ThimPress WP Pipes plugin versions prior to 1.34
Description The issue is related to an SQL Injection vulnerability in the ThimPress WP Pipes plugin, which can be exploited by authenticated administrators. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized data access or modification.
Recommendations For ThimPress WP Pipes plugin versions prior to 1.34, update to version 1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's administrative features to minimize the risk of exploitation.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-45355

Produtos afetados

Thimpress Wp Pipes