Skip to content
Fencer Vulns
medium 6.5

CVE-2022-4888 json

Multiple Plugins from Addify - Multiple CSRF

published 2023-07-31 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-52146

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 24%
public exploits
0
none known

Summary

The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2, Advanced Free Gifts WordPress plugin before 1.0.2, Gift Registry for WooCommerce WordPress plugin through 1.0.1, Image Watermark for WooCommerce WordPress plugin before 1.0.1, Order Approval for WooCommerce WordPress plugin before 1.1.0, Order Tracking for WooCommerce WordPress plugin before 1.0.2, Price Calculator for WooCommerce WordPress plugin through 1.0.3, Product Dynamic Pricing and Discounts WordPress plugin through 1.0.6, Product Labels and Stickers WordPress plugin through 1.0.1 have flawed CSRF checks in various places, which could allow attackers to make logged in users perform unwanted actions

Patch / fix

  • Unknown Checkout Fields Manager 1.0.2
  • Unknown Abandoned Cart Recovery 1.2.5
  • Unknown Custom Fields for WooCommerce 1.0.4
  • Unknown Custom Registration Forms Builder 1.0.2
  • Unknown Advanced Free Gifts 1.0.2
  • Unknown Image Watermark for WooCommerce 1.0.1
  • Unknown Order Approval for WooCommerce 1.1.0
  • Unknown Order Tracking for WooCommerce 1.0.2
  • addify checkout_fields_manager 1.0.2
  • addify abandoned_cart_recovery 1.2.5
  • addify custom_fields_for_woocommerce 1.0.4
  • addify custom_registration_forms_builder 1.0.2
  • addify advanced_free_gifts 1.0.2
  • addify gift_registry_for_woocommerce 1.0.1
  • addify image_watermark_for_woocommerce 1.0.1
  • addify order_approval_for_woocommerce 1.1.0
  • addify order_tracking_for_woocommerce 1.0.2
  • addify price_calculator_for_woocommerce 1.0.3
  • addify product_dynamic_pricing_and_discounts 1.0.6
  • addify product_labels_and_stickers 1.0.1

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • wpscan.com https://wpscan.com/vulnerability/2c2379d0-e373-4587-a747-429d7ee8f6cc referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CNA 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

  • Unknown Checkout Fields Manager
  • Unknown Abandoned Cart Recovery
  • Unknown Custom Fields for WooCommerce
  • Unknown Custom Order Number
  • Unknown Custom Registration Forms Builder
  • Unknown Advanced Free Gifts
  • Unknown Gift Registry for WooCommerce
  • Unknown Image Watermark for WooCommerce
  • Unknown Order Approval for WooCommerce
  • Unknown Order Tracking for WooCommerce
  • Unknown Price Calculator for WooCommerce
  • Unknown Product Dynamic Pricing and Discounts
  • Unknown Product Labels and Stickers
  • addify checkout_fields_manager
  • addify abandoned_cart_recovery
  • addify custom_fields_for_woocommerce
  • addify custom_order_number
  • addify custom_registration_forms_builder
  • addify advanced_free_gifts
  • addify gift_registry_for_woocommerce
  • addify image_watermark_for_woocommerce
  • addify order_approval_for_woocommerce
  • addify order_tracking_for_woocommerce
  • addify price_calculator_for_woocommerce
  • addify product_dynamic_pricing_and_discounts
  • addify product_labels_and_stickers

Classification

Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.