« Volver al listado

CVE-2022-1761

Estado: ModificadaMedia (6.5)—

El plugin Peter's Collaboration E-mails de WordPress versiones hasta 2.2.0, es vulnerable a un ataque de tipo CSRF debido a una falta de comprobaciones de nonce. Esto permite el cambio de su configuración, que puede ser usado para bajar el nivel de usuario requerido, cambiar los textos, la dirección de correo electrónico usado y más

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Peter's Collaboration E-mails Project — Peter's Collaboration E-mails

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-1761",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "contact@wpscan.com",
      "affectedData": [
        {
          "vendor": "Unknown",
          "product": "Peter’s Collaboration E-mails",
          "versions": [
            {
              "status": "affected",
              "version": "2.2.0",
              "versionType": "custom",
              "lessThanOrEqual": "2.2.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-06-13T13:15:12.153",
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "contact@wpscan.com"
    },
    {
      "url": "https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "contact@wpscan.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more."
    },
    {
      "lang": "es",
      "value": "El plugin Peter's Collaboration E-mails de WordPress versiones hasta 2.2.0, es vulnerable a un ataque de tipo CSRF debido a una falta de comprobaciones de nonce. Esto permite el cambio de su configuración, que puede ser usado para bajar el nivel de usuario requerido, cambiar los textos, la dirección de correo electrónico usado y más"
    }
  ],
  "lastModified": "2026-06-17T04:23:03.977",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:peter\\'s_collaboration_e-mails_project:peter\\'s_collaboration_e-mails:*:*:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CAC304A-2072-4BE3-98F8-35BA3E9F4F87",
              "versionEndIncluding": "2.2.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "contact@wpscan.com"
}