CVE-2022-38461: WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability
Published Nov 17, 2022
·Updated
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).
Affected Software
1 affected component
WPML Wpml Wordpress<=4.5.10
Remediation
Information
Update to 4.5.11 or higher version.
Event History
Nov 17, 2022
CVE Published
via MITRE·09:59 PM
Data Sourced
via MITRE·09:59 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-38461.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress'.
3
What is the severity of CVE-2022-38461?
The severity of CVE-2022-38461 is medium with a severity score of 4.3.
4
What is the affected software for CVE-2022-38461?
The affected software for CVE-2022-38461 is WPML Multilingual CMS premium plugin version <= 4.5.10 on WordPress.
5
How can I fix CVE-2022-38461?
To fix CVE-2022-38461, you should update the WPML Multilingual CMS premium plugin to a version higher than 4.5.10.