CVE-2022-35242

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at WordPress.

• CWE-264

• https://patchstack.com/database/vulnerability/59sec-lite-contact-form-7-push-notifications-on-ios-and-android/wordpress-the-leads-management-system-59sec-lite-plugin-3-4-1-unauthenticated-plugin-settings-change-vulnerabilityPatch, Third Party Advisory
• https://wordpress.org/plugins/59sec-lite-contact-form-7-push-notifications-on-ios-and-android/Third Party Advisory
• https://patchstack.com/database/vulnerability/59sec-lite-contact-form-7-push-notifications-on-ios-and-android/wordpress-the-leads-management-system-59sec-lite-plugin-3-4-1-unauthenticated-plugin-settings-change-vulnerabilityPatch, Third Party Advisory
• https://wordpress.org/plugins/59sec-lite-contact-form-7-push-notifications-on-ios-and-android/Third Party Advisory

Published

Aug 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35237Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-35238Unauthenticated Plugin Settings Change vulnerability in Awes…5.3
• CVE-2022-35239The image file management page of SolarView Compact SV-CPT-M…8.8
• CVE-2022-3524A vulnerability was found in Linux Kernel. It has been decla…5.5
• CVE-2022-35240In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.…7.5
• CVE-2022-35241In versions 2.x before 2.3.1 and all versions of 1.x, when N…6.5
• CVE-2022-35243In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.…9.1
• CVE-2022-35244A format string injection vulnerability exists in the XCMD g…9.8
• CVE-2022-35245In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.…7.5
• CVE-2022-35246A NoSQL-Injection information disclosure vulnerability vulne…4.3
• CVE-2022-35247A information disclosure vulnerability exists in Rocket.chat…4.3
• CVE-2022-35248A improper authentication vulnerability exists in Rocket.Cha…8.8