CVE-2022-0720
Last modified
CVE-2022-0720 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it.. EPSS estimates a 0.61% chance of exploitation in the next 30 days.
Description
The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tms-Outsource | Amelia | < 1.0.47 |
References
- https://wpscan.com/vulnerability/435ef99c-9210-46c7-80a4-09cd4d3d00cfExploit, Third Party Advisory
- https://wpscan.com/vulnerability/435ef99c-9210-46c7-80a4-09cd4d3d00cfExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-0720?
How severe is CVE-2022-0720?
How do I fix CVE-2022-0720?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-0713Heap-based Buffer Overflow in GitHub repository radareorg/ra…7.1
- CVE-2022-0714Heap-based Buffer Overflow in GitHub repository vim/vim prio…5.5
- CVE-2022-0715A CWE-287: Improper Authentication vulnerability exists that…9.1
- CVE-2022-0717Out-of-bounds Read in GitHub repository mruby/mruby prior to…9.1
- CVE-2022-0718A flaw was found in python-oslo-utils. Due to improper parsi…4.9
- CVE-2022-0719Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
- CVE-2022-0721Insertion of Sensitive Information Into Debugging Code in Gi…6.5
- CVE-2022-0722Exposure of Sensitive Information to an Unauthorized Actor i…7.5
- CVE-2022-0723Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
- CVE-2022-0724Insecure Storage of Sensitive Information in GitHub reposito…6.5
- CVE-2022-0725A flaw was found in keepass. The vulnerability occurs due to…7.5
- CVE-2022-0726Missing Authorization in GitHub repository chocobozzz/peertu…5.4
Are you affected by CVE-2022-0720?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST