CVE-2022-47181: WordPress Email Templates plugin <= 1.4.2 - Cross Site Request Forgery (CSRF)
Published Nov 7, 2023
·Updated
A vulnerability in Saad Iqbal Email Templates email-templates.This issue affects Email Templates: from n/a through <= 1.4.2.
Affected Software
2 affected components
Wpexperts Email Templates Customizer And Designer Woocommerce<=1.4.2
Wpexperts Email Templates Customizer And Designer Wordpress<=1.4.2
Remediation
Information
Update to 1.4.3 or a higher version.
Event History
Nov 7, 2023
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-47181?
CVE-2022-47181 is a Cross-Site Request Forgery (CSRF) vulnerability in the wpexpertsio Email Templates Customizer and Designer plugin for WordPress and WooCommerce.
2
How severe is CVE-2022-47181?
CVE-2022-47181 has a severity score of 8.8, which is considered high.
3
Which software versions are affected by CVE-2022-47181?
Email Templates Customizer and Designer for WordPress and WooCommerce versions up to and including 1.4.2 are affected by CVE-2022-47181.
4
What is the Common Weakness Enumeration (CWE) for CVE-2022-47181?
CVE-2022-47181 is associated with CWE-352, which is Cross-Site Request Forgery (CSRF).
5
How can I fix CVE-2022-47181?
To fix CVE-2022-47181, update the Email Templates Customizer and Designer plugin to a version beyond 1.4.2.