CVE-2022-3536CWE-352CWE-502

Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization

High · published November 7, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization attacks when they can upload a file, and a suitable gadget chain is present on the blog

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.0th percentile
Weaknesses
CWE-352 · Cross-Site Request Forgery (CSRF); CWE-502 · Deserialization of Untrusted Data
Published
2022-11-07T00:00Z
EPSS history
Timeline
  • 07 NOV 00:00Z
    Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization
    cvelistv5