CVE-2022-45819

CWE-862 — Missing Authorization3 documents3 sources

Severity

3.5LOW

EPSS

0.2%

top 63.03%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Code-atlantic Popup Maker Popup Maker Popup Maker

Timeline

PublishedDec 13

Description

Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Maker: from n/a through 1.17.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶NVDcode-atlantic/popup_maker< 1.18.0

▶CVEListV5popup_maker/popup_makern/a — 1.17.1

🔴Vulnerability Details

GHSA

GHSA-6h8p-5x85-6w38: Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Levels↗2024-12-13

▶

CVEList

WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerability↗2024-12-13

▶