CVE-2022-47182: WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control

Published Dec 13, 2024

Updated

Missing Authorization vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.4.1.

Affected Software

2 affected components

Saad Iqbal APIExperts Square for WooCommerce<=4.4.1

Wpexpertsio APIExperts Square for WooCommerce<=4.4.1

Remediation

Information

Partially patched in version >= 4.2.8. No fully patched version is available. The vendor was notified about the incomplete patch on Apr 19, 2023.

Event History

Dec 13, 2024

CVE Published

via MITRE·02:22 PM

Data Sourced

via MITRE·02:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-47182?

CVE-2022-47182 is classified as a high severity vulnerability due to its potential for unauthorized access.

How do I fix CVE-2022-47182?

To fix CVE-2022-47182, update the Wpexpertsio APIExperts Square for WooCommerce plugin to version 4.4.2 or later.

What types of access are vulnerable in CVE-2022-47182?

CVE-2022-47182 allows exploitation through incorrectly configured access control security levels.

Which versions of APIExperts Square for WooCommerce are affected by CVE-2022-47182?

Versions of APIExperts Square for WooCommerce from n/a to 4.4.1 are affected by CVE-2022-47182.

What is the impact of exploiting CVE-2022-47182?

Exploiting CVE-2022-47182 could lead to unauthorized access to sensitive data within the WooCommerce environment.