Login Request a demo
Medium severity · published Oct 16, 2024
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
A no-code page builder for beautiful performance-based content · setka
before 2.1.17 · source: vendor
AS
AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization · passionatebrains
before 2.6 · source: vendor
AA
AdFoxly – Ad Manager, AdSense Ads & Ads.txt · rafalosinski
through 1.8.4 · source: vendor
AI
All in One Invite Codes · themekraft
before 1.0.13 · source: vendor
AP
Any Popup – Popup Forms, Optins & Ads · jcodex
0 · source: vendor
AK
Atlas – Knowledge Base · sakurapixel
0 · source: vendor
AN
AutoSave Net · majick
0 · source: vendor
BM
Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages · wordplus
before 1.9.9.170 · source: vendor
BA
Booking Addon for WooCommerce · mvvapps/
before 4.2.0 · source: vendor
BA
Bulk Attachment Download · janwyl
before 1.3.5 · source: vendor
CW
Checkout with Cash App on EDD · theafricanboss/
0 · source: vendor
CW
Checkout with Venmo on EDD · theafricanboss/
0 · source: vendor
Affected product
DT
DancePress (TRWA)
benmoreassynt
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4974
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4974
freemius.com
https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/
web.archive.org
https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/
wpdirectory.net
https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5
wpdirectory.net
https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR
wpscan.com
https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a
www.wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve
More from DancePress (TRWA)
4.3
CVE-2024-53775
WordPress DancePress (TRWA) plugin <= 3.1.11 - Cross Site Request Forgery (CSRF) vulnerability