CVE-2022-38057: WordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability
Published Mar 25, 2024
·Updated
Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1.
Affected Software
3 affected components
ThemeHunk Advance WordPress Search Plugin<=1.2.1
ThemeHunk TH Advance Product Search<=1.2.1
ThemeHunk Th Advance Product Search Wordpress<1.2.2
Event History
Mar 25, 2024
CVE Published
via MITRE·11:36 AM
Data Sourced
via MITRE·11:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-38057?
CVE-2022-38057 has a high severity rating due to its missing authorization vulnerability allowing unauthorized access.
2
How do I fix CVE-2022-38057?
To fix CVE-2022-38057, update the ThemeHunk Advance WordPress Search Plugin to version 1.2.2 or later.
3
What versions are affected by CVE-2022-38057?
CVE-2022-38057 affects ThemeHunk Advance WordPress Search Plugin versions up to and including 1.2.1.
4
What is the nature of the vulnerability in CVE-2022-38057?
CVE-2022-38057 involves a missing authorization vulnerability that can lead to unauthorized actions within the plugin.
5
Who is the vendor for CVE-2022-38057?
The vendor for CVE-2022-38057 is ThemeHunk, which develops the Advance WordPress Search Plugin.