CVE-2022-3911 json
iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
published 2023-01-02 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-43247
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 42%
- public exploits
- 0
- none known
Summary
The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber can grant themselves any privileges, such as edit_plugins etc
Patch / fix
- Unknown iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more 3.3.3
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- total
- Assessed
- 18 mo ago
Exploit prediction
0.50% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- wpscan.com https://wpscan.com/vulnerability/c47fdca8-74ac-48a4-9780-556927fb4e52 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Unknown iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
Classification
- Weakness
- Technology feeds
References
-
wpscan.com
/vulnerability/c47fdca8-74ac-48a4-9780-556927fb4e52
exploit, vdb-entry, technical-description, third-party-advisory
Sources
- CVE List CVE-2022-3911
- NVD CVE-2022-3911
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.