CVE-2022-3082: miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling
Published Oct 17, 2022
·Updated
The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example
Affected Software
1 affected component
miniOrange Discord Integration WordPress<2.1.6
Event History
Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of the miniOrange Discord Integration WordPress plugin?
The vulnerability ID is CVE-2022-3082.
2
How severe is the CVE-2022-3082 vulnerability?
The severity of the CVE-2022-3082 vulnerability is medium, with a severity value of 6.5.
3
What is affected by the CVE-2022-3082 vulnerability?
The miniOrange Discord Integration WordPress plugin version up to 2.1.6 is affected by the CVE-2022-3082 vulnerability.
4
What is the impact of the CVE-2022-3082 vulnerability?
The CVE-2022-3082 vulnerability in the miniOrange Discord Integration WordPress plugin allows any logged-in user to call AJAX actions and disable the app.
5
How can I fix the CVE-2022-3082 vulnerability?
To fix the CVE-2022-3082 vulnerability, update the miniOrange Discord Integration WordPress plugin to version 2.1.6 or newer.