← CVE Intelligence

CVE-2022-3882

WP Memory < 2.46 - Subscriber+ Arbitrary Plugin Installation PUBLISHED

Description (CNA)

The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org

Affected (CNA)

Vendor / productVersions
Unknown / Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Pluginaffected 0 before 2.46

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.