CVE-2022-23981: WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability
Published Feb 18, 2022
·Updated
The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4).
Affected Software
1 affected component
Quadlayers Perfect Brands For Woocommerce Wordpress<=2.0.4
Remediation
Information
Update to 2.0.5 or higher version.
Event History
Feb 18, 2022
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-23981?
CVE-2022-23981 is considered a high severity vulnerability as it allows unauthorized users to exploit the plugin functionality.
2
How do I fix CVE-2022-23981?
To fix CVE-2022-23981, update the Perfect Brands for WooCommerce plugin to version 2.0.5 or later.
3
Who is affected by CVE-2022-23981?
CVE-2022-23981 affects all users of the Perfect Brands for WooCommerce plugin versions 2.0.4 and earlier.
4
What type of vulnerability is CVE-2022-23981?
CVE-2022-23981 is a privilege escalation vulnerability that allows Subscriber+ level users to create brands.
5
What is the impact of CVE-2022-23981?
The impact of CVE-2022-23981 includes the potential for unauthorized manipulation of brand data within the WooCommerce environment.