CVE-2022-3694

CVSS V2 None CVSS V3 None
Description
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.
Overview
  • CVE ID
  • CVE-2022-3694
  • Assigner
  • contact@wpscan.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-05T17:15:10.073
  • Last Modified Date
  • 2022-12-06T19:10:52.783
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:syncee:syncee_-_global_dropshipping:*:*:*:*:*:wordpress:*:* 1 OR 1.0.10
References
Reference URL Reference Tags
https://wpscan.com/vulnerability/ad12bab7-9baf-4646-a93a-0d3286407c1e Exploit Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-3694
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3694
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:34 Added to TrackCVE