CVE-2022-3082

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-352CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Oct 17, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-308208.8In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.CVE-2022-308218.8In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file uCVE-2022-308228.8In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file.CVE-2022-308237.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php.CVE-2022-308257.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.CVE-2022-308267.2Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php.CVE-2022-308277.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php.CVE-2022-308287.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php.CVE-2022-308297.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php.CVE-2022-30835.4All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web aCVE-2022-308307.2Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php.CVE-2022-308317.2Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php.
CVE-2022-3082: Medium severity, CVSS 6.5 | Vulnix