chained products vulnerabilities and fixes
Recent CVEs affecting chained products, with upgrade or downgrade steps. 1 tracked.
Also searched as: chainedproducts.
chained products has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-01-30. Highest priority: CVE-2022-4872 (score 25/100).
- CVE-2022-4872 MEDIUM 4.3 UPGRADE The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as do
FAQ
How do I fix chained products vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chained products being exploited right now?
None of the tracked chained products CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chained products CVE should I patch first?
CVE-2022-4872 currently ranks highest (25/100): The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as do.