CVE-2022-3082
miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling
- State
- Published
- Severity
- 6.5 Medium
- Published
- Oct 17, 2022
- Updated
- May 13, 2025
- Reserved
- Sep 1, 2022
Description
The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
miniOrange Discord IntegrationUnknown |
|
References
- https://wpscan.com/vulnerability/a91d0501-c2a9-4c6c-b5da-b3fc29442a4fexploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.