CVE-2022-0885

The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

9.44% chance of exploitation in the next 30 days, 95th percentile

Nuclei

critical · CWE-862

Published

2022-06-13

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/8b08b72e-5584-4f25-ab73-5ab0f47412df

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0885.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-0884
• CVE-2022-0887
• CVE-2022-0881
• CVE-2022-0888
• CVE-2022-0879
• CVE-2022-0890