CVE-2022-40700
19.01.2024, 15:15
Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet A virtual wallet for WooCommerce, Long Watch Studio WooVIP Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.
| Vendor | Product | Version |
|---|---|---|
| millionclues | admin_css_mu | 𝑥 ≤ 2.6 |
| deano | amp_toolbox | 𝑥 ≤ 2.1.1 |
| unihost | confirm_data | 𝑥 ≤ 1.0.7 |
| agence-press | css_adder | 𝑥 ≤ 1.5.0 |
| millionclues | custom_login_admin_front-end_css | 𝑥 ≤ 1.4.1 |
| montonio | montonio_for_woocommerce | 𝑥 ≤ 6.0.1 |
| frumph | phpfreechat | 𝑥 ≤ 0.2.8 |
| designmodo | qards | 𝑥 ≤ 1.0.5 |
| paulclark | styles | 𝑥 ≤ 1.2.3 |
| squidesma | theme_minifier | 𝑥 ≤ 2.0 |
| longwatchstudio | woosupply | 𝑥 ≤ 1.2.2 |
| longwatchstudio | woovip | 𝑥 ≤ 1.4.4 |
| longwatchstudio | woovirtualwallet | 𝑥 ≤ 2.2.1 |
| arcstone | amo_for_wp_-_membership_management | 𝑥 ≤ 4.6.6 |
| wpopal | wpopal_core_features | 𝑥 ≤ 1.5.8 |
𝑥
= Vulnerable software versions
References