CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-3995

The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lock_unlock_terawallet AJAX action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to lock/unlock other users wallets.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 15.4%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2022-3995

Standalonetech » Terawallet » Version: N/A

cpe:2.3:a:standalonetech:terawallet:-
Standalonetech » Terawallet » Version: 1.3.0

cpe:2.3:a:standalonetech:terawallet:1.3.0
Standalonetech » Terawallet » Version: 1.3.1

cpe:2.3:a:standalonetech:terawallet:1.3.1
Standalonetech » Terawallet » Version: 1.3.10

cpe:2.3:a:standalonetech:terawallet:1.3.10
Standalonetech » Terawallet » Version: 1.3.11

cpe:2.3:a:standalonetech:terawallet:1.3.11
Standalonetech » Terawallet » Version: 1.3.12

cpe:2.3:a:standalonetech:terawallet:1.3.12
Standalonetech » Terawallet » Version: 1.3.13

cpe:2.3:a:standalonetech:terawallet:1.3.13
Standalonetech » Terawallet » Version: 1.3.14

cpe:2.3:a:standalonetech:terawallet:1.3.14
Standalonetech » Terawallet » Version: 1.3.15

cpe:2.3:a:standalonetech:terawallet:1.3.15
Standalonetech » Terawallet » Version: 1.3.16

cpe:2.3:a:standalonetech:terawallet:1.3.16
Standalonetech » Terawallet » Version: 1.3.17

cpe:2.3:a:standalonetech:terawallet:1.3.17
Standalonetech » Terawallet » Version: 1.3.18

cpe:2.3:a:standalonetech:terawallet:1.3.18
Standalonetech » Terawallet » Version: 1.3.19

cpe:2.3:a:standalonetech:terawallet:1.3.19
Standalonetech » Terawallet » Version: 1.3.2

cpe:2.3:a:standalonetech:terawallet:1.3.2
Standalonetech » Terawallet » Version: 1.3.20

cpe:2.3:a:standalonetech:terawallet:1.3.20
Standalonetech » Terawallet » Version: 1.3.21

cpe:2.3:a:standalonetech:terawallet:1.3.21
Standalonetech » Terawallet » Version: 1.3.22

cpe:2.3:a:standalonetech:terawallet:1.3.22
Standalonetech » Terawallet » Version: 1.3.23

cpe:2.3:a:standalonetech:terawallet:1.3.23
Standalonetech » Terawallet » Version: 1.3.24

cpe:2.3:a:standalonetech:terawallet:1.3.24
Standalonetech » Terawallet » Version: 1.3.3

cpe:2.3:a:standalonetech:terawallet:1.3.3
Standalonetech » Terawallet » Version: 1.3.4

cpe:2.3:a:standalonetech:terawallet:1.3.4
Standalonetech » Terawallet » Version: 1.3.5

cpe:2.3:a:standalonetech:terawallet:1.3.5
Standalonetech » Terawallet » Version: 1.3.6

cpe:2.3:a:standalonetech:terawallet:1.3.6
Standalonetech » Terawallet » Version: 1.3.7

cpe:2.3:a:standalonetech:terawallet:1.3.7
Standalonetech » Terawallet » Version: 1.3.8

cpe:2.3:a:standalonetech:terawallet:1.3.8
Standalonetech » Terawallet » Version: 1.3.9

cpe:2.3:a:standalonetech:terawallet:1.3.9
Standalonetech » Terawallet » Version: 1.4.0

cpe:2.3:a:standalonetech:terawallet:1.4.0
Standalonetech » Terawallet » Version: 1.4.1.

cpe:2.3:a:standalonetech:terawallet:1.4.1.
Standalonetech » Terawallet » Version: 1.4.2

cpe:2.3:a:standalonetech:terawallet:1.4.2
Standalonetech » Terawallet » Version: 1.4.3

cpe:2.3:a:standalonetech:terawallet:1.4.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-3995

Products

Pricing

Contact Us