CVE-2022-45069: WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability
First published: Thu Nov 17 2022(Updated: )
Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress.
Credit: audit@patchstack.com audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Automattic Crowdsignal Dashboard | <3.0.10 | |
| <3.0.10 |
Remedy
Update to 3.0.10 or higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-45069?
CVE-2022-45069 is an Authentication (contributor+) Privilege Escalation vulnerability in the Crowdsignal Dashboard plugin version 3.0.9 and below on WordPress.
How severe is CVE-2022-45069?
CVE-2022-45069 has a severity rating of 8.8 (High).
What software is affected by CVE-2022-45069?
The Crowdsignal Dashboard plugin version 3.0.9 and below on WordPress is affected by CVE-2022-45069.
How can I fix CVE-2022-45069?
To fix CVE-2022-45069, update the Crowdsignal Dashboard plugin to version 3.0.10 or above.
Where can I find more information about CVE-2022-45069?
You can find more information about CVE-2022-45069 at the following link: [Vulnerability Information](https://patchstack.com/database/vulnerability/polldaddy/wordpress-crowdsignal-dashboard-plugin-3-0-9-privilege-escalation-vulnerability?_s_id=cve)
- collector/nvd-index
- agent/type
- agent/remedy
- agent/severity
- agent/references
- agent/title
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/automattic
- canonical/automattic crowdsignal dashboard