Vulnerability · Published Jan 17, 2024 · Assigned by Patchstack
CVE-2022-42884WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control
Medium 5.4
In plain English
A medium-severity missing authorization in WIP Custom Login from ThemeinProgress. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.4%top 61.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ThemeinProgress | WIP Custom Login | n/a – through 1.2.7 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N