CVE-2022-4693: User Verification < 1.0.94 - Authentication Bypass
The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-4693?
CVE-2022-4693 is a security vulnerability in the User Verification WordPress plugin before version 1.0.94 that allows authentication bypass using only the user's username.
How severe is CVE-2022-4693?
CVE-2022-4693 has a severity rating of 9.8 (Critical).
How does CVE-2022-4693 affect the User Verification WordPress plugin?
CVE-2022-4693 affects the User Verification WordPress plugin versions prior to 1.0.94, allowing an attacker to bypass authentication using just the username.
What is the impact of CVE-2022-4693?
The impact of CVE-2022-4693 is an authentication bypass vulnerability, potentially granting unauthorized access to user accounts.
How can I fix CVE-2022-4693?
To fix CVE-2022-4693, update your User Verification WordPress plugin to version 1.0.94 or higher.