CVE-2022-4693
Critical
Description
The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPickplugins User Verification
PublishedJan 23, 2023
First seenJan 23, 2023
Weakness typeCWE-287Improper authentication
How to fix
Update
- pickplugins user_verification1.0.94 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pickplugins user_verification | v < 1.0.94 | 1.0.94 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.