Chained Products Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Chained Products Project records in CISA KEV

No Chained Products Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chained Products 1 record MEDIUM

Records

1 record

TI-2022-04465 CVE-2022-4872 · GHSA-5fp7-mmp5-2244

WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'

MEDIUM 53

The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set ar…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00281 Published 2023-01-30 Fixed in 2.12.0 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0