{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2022-4974 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2022-4974 yet. Limit exposure of the affected software until one is available.","what":"CVE-2022-4974 is a medium-severity missing authorization vulnerability in 5starplugins 3D Viewer – Display Interactive 3D Models, published on 16 Oct 2024. Any signed-in user can exploit it over the network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-4974 and fix it if it is affected.\n\nWhat it is: CVE-2022-4974 is a medium-severity missing authorization vulnerability in 5starplugins 3D Viewer – Display Interactive 3D Models, published on 16 Oct 2024. Any signed-in user can exploit it over the network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-4974 in the wild and no public exploit code.\n\nAffected product: 5starplugins 3D Viewer – Display Interactive 3D Models. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-4974/ (Markdown: https://insights.sbomify.com/CVE-2022-4974/index.md)","id":"CVE-2022-4974","markdown":"https://insights.sbomify.com/CVE-2022-4974/index.md","name":"CVE-2022-4974","record":{"aliases":["GHSA-p5fp-r7v7-h5q7"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["data_read","security_bypass"],"network_reachable":"yes","non_default_config":false,"product_category":"WordPress SDK","requires_auth":"low_privilege","summary":"Attackers can access debug logs and modify database options in WordPress plugins using the vulnerable Freemius SDK due to missing authorization checks.","user_interaction":"not_required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Wordfence","cpe":[],"cvss":{"score":6.3,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"cwes":[{"id":"CWE-862","name":"Missing Authorization"}],"description":"The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Freemius SDK \u003c= 2.4.2 - Missing Authorization Checks","id":"CVE-2022-4974","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"missing_authorization","year":"2022"},"n_packages":0,"n_references":6,"next":{"headline":"Rhacs: cross-site scripting in portal","id":"CVE-2022-4975"},"packages":[],"prev":{"headline":"WordPress Core \u003c 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function","id":"CVE-2022-4973"},"products":["3D Viewer – Display Interactive 3D Models","A no-code page builder for beautiful performance-based content","ACF for WooCommerce Product","AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading \u0026 Image Optimization","AFI – The Easiest Integration Plugin","APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps","AWCA – The Great Analytics Insights for Your eStore","Abeta Link PunchOut","Activity Log For MainWP","AdFoxly – Ad Manager, AdSense Ads \u0026 Ads.txt","Add Linkedin insight tags for Linkedin ads","Add Pinterest conversion tags for Pinterest Ads +  Site verification","Add Tiktok Pixel for Tiktok ads (+Woocommerce)","Add Twitter Pixel for Twitter ads","Addon Elements for Elementor (formerly Elementor Addon Elements)","Ads.txt \u0026 App-ads.txt Manager for WordPress","Advanced Classifieds \u0026 Directory Pro","Advanced Custom Fields options import/export","Advanced Database Replacer","Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily","Advanced Page Visit Counter –  Most Wanted Analytics Plugin for WordPress","Affiliate Link Builder Plugin for Amazon Associates – Review Engine","Age Verification Screen for WooCommerce","Agy – Age verification for WooCommerce","AidWP – Donation \u0026 Payment Forms (Stripe Powered)","Airpress","All in One Invite Codes","All-in-One Video Gallery","Alley Business Toolkit","Amela","Anfrageformular – Multi Step Drag \u0026 Drop Formular Builder – Leadgenerierung","Announcement \u0026 Notification Banner – Bulletin","Ant Admin Notices for Team","Any Popup – Popup Forms, Optins \u0026 Ads","Aquarella Lite","Arendelle","Atlas – Knowledge Base","Auto SEO META keywords (META tags keywords) optimization + WooCommerce","AutoSave Net","Automatic Internal Links for SEO by Pagup","Automatic YouTube Gallery","Automizy Gravity Forms","Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP","Awesome SSL","B2B Request a Quote","BAVOKO SEO Tools – All-in-One WordPress SEO","Bani","Banner Management, Product Slider, Product Carousel for WooCommerce","Battle Suit for Divi","Before and After Product Images for WooCommerce","Better Addons for Elementor","Better Messages – Integration for WC Vendors Marketplace","Better Messages – Live Chat, Chat Rooms, Real-Time Messaging \u0026 Private Messages","Better Messages – WCFM Integration","Better Robots.txt – AI-Ready Crawl Control \u0026 Bot Governance","Better Sharing","Block Slider – Responsive Image Slider, Video Slider \u0026 Post Slider","Block Styler For Gravity Forms","Block, Suspend, Report for BuddyPress","BlockMeister – Block Pattern Builder","BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor","Blocked in China | Check if your site is available in the Chinese mainland","Blocksy Companion","BlockyPage – Gutenberg Based Page Builder","Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News","Blog Sidebar Widget","Book BuyBack Prices","BookPress – For Book Authors","Booking Addon for WooCommerce","Bookit — Booking \u0026 Appointment Calendar","Brand","Broadcast Lite","BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages","Builder for WooCommerce product reviews shortcodes – ReviewShort","Bulk Attachment Download","Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)","Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO)","Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor","Bulk Edit Coupons for WooCommerce – WP Sheet Editor","Bulk Edit Posts and Products in Spreadsheet","Bulk Edit Products for WooCommerce – WP Sheet Editor","Bulk Edit and Create User Profiles – WP Sheet Editor","Bulk WooCommerce Category Creator","Buttonizer – Floating Menus, Sticky Buttons, \u0026 Popup Builder","CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress","CF7 Constant Contact Fields Mapping","CP Simple Newsletter","CartPops – High Converting Add To Cart Popup For WooCommerce","Cartoon Url","Categorify – WordPress Media Library Category \u0026 File Manager","Caxton – Create Pro page layouts in Gutenberg","Change Price Title for WooCommerce","Change Prices with Time for WooCommerce","Chat Button- Leads and Order over Chat","Checkout with Cash App on EDD","Checkout with Venmo on EDD","Checkout with Zelle on Woocommerce","Choice Payment Gateway for WooCommerce","Clean Social Icons","ClickerVolt – Affiliate Links \u0026 Click Tracking for Performance Marketers","ClimateClick: Climate Action for all","Code Manager","CodeKit – Custom Codes Editor","Coinbase Commerce – Crypto Gateway for WooCommerce","Comments Not Replied To","ConeBlog – Elementor Blog Widgets","Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance","Connected Sermons","ConsultPress Lite","Contact Form 7 Multi-Step Forms","Contact Form 7 – Capsule CRM – Integration","Contact List – Online Staff Directory \u0026 Address Book","Contact Widgets For Elementor all the contact links you need in one place","Content Aware Sidebars – Fastest Widget Area Plugin","Conversion de moneda Woocommerce","Cookie Banner for GDPR / CCPA – WPLP Cookie Consent","Country Based Payments for WooCommerce","Coupon Affiliates – Affiliate Plugin for WooCommerce","Court Reservation – Manage Your Court Bookings Online","Cryptocurrency Portfolio Tracker","Cryptocurrency Product for WooCommerce","Cuisine Palace","Custom Login Page Customizer","Custom Registration and Custom Login Forms with New Recaptcha","Custom WooCommerce Checkout Fields Editor","Customers Table for WooCommerce: View, Search, Bulk Editor","Da Reactions","DancePress (TRWA)","Dashy – Google Analytics advanced dashboard","DeMomentSomTres Address","DeMomentSomTres Grid Archive","DeMomentSomTres Media Tools Auto","Deals of the Day WooCommerce","Delete Duplicate Posts","Delete Posts automatically","Delivery for WooCommerce","Digital Goods (Checkout Field Editor) for WooCommerce Checkout","Disable Payment Methods based on cart conditions for WooCommerce","Display Eventbrite Events","Divi Collage","Divi Content Restrictor","Divi Gravity Forms (WP Tools)","Divi Torque Lite – Divi Theme, Divi Builder \u0026 Extra Theme","Document Viewer – Embed Word, Excel, PowerPoint \u0026 PDFs Instantly","Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional)","Drip Feed Content Extended for Learndash","Drop Shadow Boxes","Duplicate Variations for Woocommerce","Dynamic Pricing and Discount Rules for WooCommerce","Dynific Addons for Elementor (formerly AnyWhere Elementor)","EU VAT Assistant for WooCommerce","Easy Age Verify","Easy Appointment Booking \u0026 Scheduling System – Webba Booking Calendar","Easy Code Snippets","Easy Math Captcha for CF7","Easy Newsletter Signups","Easy Post Views Count","Easy Prayer","Easy Settings for LearnDash","Easy Smooth Scroll Links  – Smooth Scrolling Anchor","Easy Social Feed – Social Photos Gallery and Post Feed for WordPress","Easy TikTok Feed – TikTok Video, Feed \u0026 Gallery Plugin","Easy Zillow Reviews","Education Addon for Elementor","Elasta","Elation","Elements for LifterLMS","Email Header Footer","Email Tracker","Emails Blacklist for Everest Forms","Enhanced Ecommerce Google Analytics for WooCommerce","Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance","Error Log Monitor","EthPress – Web3 Login","Ether and ERC20 tokens WooCommerce Payment Gateway","Ethereum Wallet","EthereumICO","Event Tickets and Registration","Events Addon for Elementor","Events Calendar Registration","Everse","Expire tags","Extend Filter Products By Price Widget","Extra Fees for WooCommerce","FAQ Manager For Divi, Gutenberg Block \u0026 Shortcode","FIT: Featured Image Toolkit","Fast Checkout for WooCommerce","Fast WordPress","Featured Images in RSS for Mailchimp \u0026 More","Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin)","FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback.","Feedpress Generator – External RSS Frontend Customizer","FiboSearch – Ajax Search for WooCommerce","File Manager for Google Drive – Integrate Google Drive","Filr – Secure document library","Five-Star Ratings Shortcode","Flat Rate Shipping Method for WooCommerce","Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL","Focus on Reviews for WooCommerce","Food Store – Online Food Delivery \u0026 Pickup","Footer Plugin for Divi","ForceField","Form Vibes – Database Manager for Forms","Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook","Fraud Prevention For WooCommerce and EDD","Front End PM","Frontend Admin by DynamiApps","Frontend Admin – Add and edit posts, pages, users and more all from the frontend","Frontend group restriction for LearnDash","Full Page Blog Designer","Fullscreen Menu","Funnelmentals","Fuse Social Floating Sidebar","GA4WP – Analytics Dashboard for the Website","GFireM Action After","GFireM Advance Search","GFireM Fields","Gallery PhotoBlocks","Gallery by FooGallery","Gateway for PayLate on WooCommerce","Genealogical Tree – Family Tree \u0026 Ancestry for WordPress","Generate Images (AI) – Magic Post Thumbnail","Geo Mashup","Get Better Reviews for WooCommerce","Get Directions Map","Get feedback from visitors – WP Feedback Suite Plugin","Gift Message for WooCommerce","Giveaways for woocommerce","Glorious Services \u0026 Support","GloriousThemes Starter Sites","Glossary","Go Fetch Jobs (for WP Job Manager)","Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share \u0026 view counters","Greenshift – animation and page builder blocks","Grid \u0026 Styler For Contact Form 7 And Divi","Guest posting / Frontend Posting / Front Editor – WP Front User Submit","Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form","Gutenberg Blocks – ACF Blocks Suite","HM Multiple Roles","HQTheme Extra","Hasium","Helpie FAQ — Accordion, Docs \u0026 Knowledge Base","Hide Shipping Method For WooCommerce","Hooked Editable Content","HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz","Iks Menu – WordPress Category Accordion Menu \u0026 FAQs","Image Alt Text Manager – Bulk \u0026 Dynamic Alt Tags For image SEO Optimization + AI","Image Carousel For Divi","Image Photo Gallery Final Tiles Grid","Impexium Single Sign On","Inbound Brew","Insert or Embed Articulate Content into WordPress","Internal Link Juicer: SEO Auto Linker for WordPress","Ivory Search – WordPress Search Plugin","JDs Portfolio","Joli FAQ SEO – WordPress FAQ Plugin","Joli Table Of Contents","Justified Gallery","KRSP Frontend File Uploader","KVoucher","Kikote – Location Picker at Checkout \u0026 Google Address AutoFill Plugin for WooCommerce","Knowledge Base documentation \u0026 wiki plugin – BasePress Docs","LMS Plugin – eLearning, Online Courses by Attest","LawPress – Law Firm Website Management","LearnMore","License Manager for WooCommerce","Lightbox \u0026 Modal Popup WordPress Plugin – FooBox","Lightbox – EverlightBox Gallery","Limb Gallery | Create Beautiful Image \u0026 Video Galleries","ListPlus – Unlimited Listing Directory","LittleBot ACH for Stripe + Plaid","LittleBot Invoices","Live Drag and Drop Builder for Contact Form 7","Live Scores for SportsPress","Live TV Player – Worldwide Live TV Channels Player for WordPress","Livemesh Addons by Elementor","Livemesh Addons for Beaver Builder","Livemesh SiteOrigin Widgets","Local Delivery Drivers for WooCommerce","LocalSEOMap","Logo Showcase – Responsive Logo Carousel, Logo Slider \u0026 Logo Grid","MOBILOOK — Mobile View \u0026 Mobile‑Friendly Test","MailChimp Manager","MapGeo – Interactive Geo Maps","Marijuana Age Verify","Market Exporter","Masonry Gallery \u0026 Posts For Divi (WP Tools)","Mass Pages/Posts Creator","Master Accordion ( Former WP Awesome FAQ Plugin )","Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder \u0026 Template Kits","Master Blocks – Gutenberg Site Builder","Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more","Media Library File Download","Menu Image, Icons made easy","Menu Item Scheduler","Meridia","Mixed Media Gallery Blocks","Modern Addons for Elementor Page Builder","Modern Designs for Gravity Forms","Multi Page Auto Advance for Gravity Forms","Multipurpose Gutenberg Block","Multisite Robots.txt Manager","Music Player for Elementor – Audio Player \u0026 Podcast Player","NEXUS","New User Approve","NicheBase","NicheTable – Responsive Comparison Table Block","Ninja Libs Amazon SES","Nitek Carousel Slider Cool Transitions","Nokke","NotifSMS – SMS Notifications OTP \u0026 2FA for WordPress \u0026 WooCommerce","Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar","Nugget by Ingot: Easy, automated and native A/B testing for everyone","Number Chat","Ocean Extra","One Click Login","Opensea","Order and Inventory Manager for WooCommerce","Out of stock display for woocommerce","Overlay Image Divi Module","Page Builder Gutenberg Blocks – Kioken Blocks","Page Builder Sandwich – Front End WordPress Page Builder Plugin","Page Builder for Gutenberg – StarterBlocks","Panorama – 360 Virtual Tour, Panoramic image viewer and More","Passster – Password Protect Pages and Content","Past Events Extension","Pay For Post with WooCommerce","Payment Gateway Per Product for WooCommerce","Payment Gateway for PayFabric","Performance Kit","Persistent Login","Pinblocks — Gutenberg blocks with Pinterest widgets","Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing","Place Order Without Payment for WooCommerce","Pledged Plugins Secure Gateway for Authorize.net and WooCommerce","Podcast Box – Best Podcasting Plugin for WordPress","Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred","Pootle Pagebuilder – WordPress Page builder","PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text","Post Carousel Divi","Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)","Post List Designer – Category Post, Recent Post, Post List","Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider","Post Snippets – Custom WordPress Code Snippets Customizer","Post to Google My Business (Google Business Profile)","Postcode Redirect","Power Ups for Elementor","PowerFolio – Portfolio \u0026 Image Gallery for Elementor","Preloader for Divi","Premmerce","Premmerce Brands for WooCommerce","Premmerce Multi-currency for Woocommerce","Premmerce Permalink Manager for WooCommerce","Premmerce Product Filter for WooCommerce","Premmerce Product Search for WooCommerce","Premmerce Redirect Manager","Premmerce SEO for WooCommerce","Premmerce User Roles","Premmerce Variation Swatches for WooCommerce","Premmerce Wholesale Pricing for WooCommerce","Premmerce Wishlist for WooCommerce","Premmerce WooCommerce Customers Manager","Price Bands for WooCommerce","Primary Addon for Elementor","Prime Mover – Migrate WordPress Website \u0026 Backups","Prime Slider – Addons for Elementor","Print My Blog – Print, PDF, \u0026 eBook Converter WordPress Plugin","Pro Broken Links Maintainer","Product Attachment for WooCommerce","Product Author for WooCommerce","Product Carousel For WooCommerce – WoorouSell","Product Country Restrictions for WooCommerce – Country Catalogs","Product Customer List for WooCommerce","Product Image Watermark for Woo","Product Options and Price Calculation Formulas for WooCommerce – Uni CPO","Product Size Charts Plugin for WooCommerce","Protect Uploads with Login – Protect Your Uploads","Purosa","Purus","Quick Affiliate Store","Quick Contact Form","Quick Event Manager","Quick Paypal Payments","Qyrr – simply and modern QR-Code creation","RT Easy Builder – Advanced addons for Elementor","RW Divi Unite Gallery","RaCar Clear Cart for WooCommerce","Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player","Radio Station by netmix® – Manage and play your Show Schedule in WordPress!","RankBear","Rating-Widget: Star Review System","Really Simple Featured Video – Featured Video Support for Posts, Pages \u0026 WooCommerce Products","RecurWP – WordPress Recurly Payment Gateway","Redirection for Contact Form 7","Remove Add to Cart WooCommerce","Replyable – Subscribe to Comments and Reply by Email","Reset Course Progress For LearnDash","Responsive Social Slider Widget","Rest Routes – Custom Endpoints for WordPress REST API","Restaurant \u0026 Cafe Addon for Elementor","Restrict User Access – Ultimate Membership \u0026 Content Protection","Restrict – membership, site, content and user access restrictions for WordPress","RevivePress – Keep your Old Content Evergreen","Revolution for Elementor","Rocket Maintenance Mode \u0026 Coming Soon Page","Royal Addons for Elementor – Addons and Templates Kit for Elementor","Run Contests, Raffles, and Giveaways with ContestsWP","Run time Image resizing","SEO Audit – WP Site Auditor","SEO Booster","SKT Templates – 100% Free Templates for Elementor \u0026 Gutenberg","SQL Reporting Services – SSRS Plugin for WordPress","SSL Atlas – Free SSL Certificate \u0026 HTTPS Redirect for WordPress","SSL Zen — SSL Certificate Installer \u0026 HTTPS Redirects","STAX Header Builder","STEWoo – Super Transactional Emails for WooCommerce","SV Proven Expert","SV Tracking Manager","SVG Flags – Beautiful Scalable Flags For All Countries!","Salon Booking System – Free Version","Scheduled Notification Bar","Schema Plugin For Divi, Gutenberg \u0026 Shortcodes","Scrollsequence – Cinematic Scroll Image Animation Plugin","Secure IP Logins","Security Ninja – WordPress Security \u0026 Firewall","Security Safe","Send Prebuilt Emails","Server Info","Share This Image","Shared Files – Frontend File Upload Form \u0026 Secure File Sharing","SheetPress – Manage WordPress Meta data with Google Sheets","Shipping Gateway Per Product for WooCommerce","Shipping Method Display Style for WooCommerce","Shuban","Simple Feature Requests Free – User Feedback Board","Simple Giveaways – Grow your business, email lists and traffic with contests","Simple Sitemap – Create a Responsive HTML Sitemap","Simple Social Page Widget \u0026 Shortcode","Simple Sponsorships","Sky Login Redirect","SlideDeck: Responsive WordPress Slider Plugin","Smart Variations Images \u0026 Swatches for WooCommerce","SnazzyAdmin WP Admin Theme","Social Gallery Lite","Social Kit","SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview","South Pole: Climate action now","Sparrow: Product Reviews and Ratings for WooCommerce","Speculor","Spotlight Social Feeds – Block, Shortcode, and Widget","Stackable – Page Builder Gutenberg Blocks","Starfish Review Generation \u0026 Marketing for WordPress","Station Pro – Advanced Audio Streaming \u0026 Player for WordPress","Sticky add to cart for Woo","Stop Contact Form 7 Spam \u0026 WPForms Spam – Free Protection","Store Toolkit –  WooCommerce Extensions, Quick Enhancements \u0026 Handy Tools","StoreCustomizer – A plugin to Customize all WooCommerce Pages","Streak CRM For Gmail For Contact Form 7 – WordPress Plugin","StreamCast – Live Radio Streaming Player","StreamWeasels Twitch Integration","Strumenti Partita IVA per Woocommerce","Styler Mate for Contact Form 7","Super Video player – Fully Customizable Video Player with Playlist","Surbma | GDPR Proof Cookie Consent \u0026 Notice Bar","SurveyFunnel – Survey Plugin for WordPress","Sync eCommerce NEO","TK Google Fonts GDPR Compliant","TK SmugMug Slideshow Shortcode","Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent","Tabs with Recommended Posts (Widget)","Tag Groups is the Advanced Way to Display Your Taxonomy Terms","Tarot Card Oracle","Team Collaboration \u0026 Content Workflow Plugin for WordPress Editorial Teams – Multicollab","Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More","Thank You Page for WooCommerce","The Events Calendar","The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected","Tickera – Sell Tickets \u0026 Manage Events","Tiered Pricing Table for WooCommerce","TinyMCE Annotate","TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More","TreePress – Easy Family Trees \u0026 Ancestor Profiles","Turbo Widgets","TwentyFourth WP Scraper","URL Shortify – Simple and Easy URL Shortener","Ukrposhta","Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor","Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster","Ultimate Carousel For Divi","Ultimate Divi Modules Suite – Divi Sumo Lite","Ultimate Gutenberg – Custom Block Templates","Ultimate Post Kit Addons for Elementor","Ultimate Widgets Light","Ultimeter","Ultra Elementor Addons","Unakit","Under Construction","Unlimited Elements For Elementor","User Menus – Nav Menu Visibility","VO Store Locator – WP Store Locator Plugin","VidSEO – Video transcript embedding for WordPress \u0026 LLM","Videopack","Villar","Viralike","Vit Website Reviews","W3SCloud Contact Form 7 to Zoho CRM","WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce","WCC SEO Keyword Research","WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms","WP Activity Log","WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer","WP Affiliate Disclosure","WP Author Bio","WP AutoMedic","WP Books Gallery – Build Stunning Book Showcases \u0026 Libraries in Minutes","WP BugBot","WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete \u0026 Remove Comments","WP Conference Schedule","WP Contact Slider – Contact Form Slider Widget","WP Coupons and Deals – Coupon Plugin For Affiliate Marketers","WP Data Access – App Builder for Tables, Forms, Charts, Maps \u0026 Dashboards","WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)","WP Dev Powers – Display Screen Dimensions to Admin Plugin","WP Disable Sitemap","WP Easy Pay – Payment and Donation form Builder for Square","WP Emaily","WP Encryption – One Click Free SSL Certificate \u0026 SSL / HTTPS Redirect, Security \u0026 SSL Scan","WP Event Partners – WordPress Plugin for Event and Conference Management","WP Free SSL","WP Frontend Admin – Display WP Admin Pages in the Frontend","WP Frontend Profile","WP Get Personal","WP Google Street View (with 360° virtual tour) \u0026 Google maps + Local SEO","WP Gratify","WP Group Promoter","WP Lead Stream","WP Link Bio","WP Meta and Date Remover","WP Mobile Menu – The Mobile-Friendly Responsive Menu","WP Moose","WP Munich Blocks – Gutenberg Blocks for WordPress","WP Notification Bell","WP Page Templates","WP Photo Effects","WP Post Block","WP Radio – Worldwide Online Radio Stations Directory for WordPress","WP Relevant Ads","WP Required Taxonomies – Categories and Tags Mandatory","WP SPID Italia","WP School Calendar","WP Search Filter","WP Sessions Time Monitoring Full Automatic","WP Sierra","WP Smart Export (Free)","WP Table Builder – Drag \u0026 Drop Table Builder","WP Tools Divi Blog Carousel","WP Tools Divi Product Carousel","WP Travel Engine – Tour Booking Plugin – Tour Operator Software","WP fail2ban – Advanced Security","WP-Cron Status Checker","WP-HR Manager: The Human Resources Plugin for WordPress","WPBITS Addons For Elementor Page Builder","WPBakery Page Builder Addons by Livemesh","WPGSI: Spreadsheet Integration","WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc…","WPOptin – AI-Powered Top Bars, PopUps \u0026 Lead Generation","WPVisitorInfo – Show Visitor Information \u0026 Conditional Data Based On That Information","WS Bootstrap","WUPO Group Attributes for WooCommerce","Wadi Survey","Walker Core","WebinarIgnition – Live, Automated \u0026 Evergreen Webinars for WooCommerce","Wholesale for WooCommerce","Widget Detector for Elementor","Widget for Contact form 7","Widgets for WooCommerce Products on Elementor","Widgets on Pages","Widgets on Pages and Posts","Woo Admin Product Notes","WooCommerce Next Order Coupon","WooCommerce PayPlug","WooCommerce Variation Swatches for Products","WooCommerce upcoming Products","Woocommerce Customer Reviews with Artificial Intelligence analyzis,  with IBM Watson Tone Analyzer","Woocommerce Customers Order History","WoowGallery","WordPress Animation Plugin – Animated Everything","WordPress Auto SEO Plugin – Upfiv SEO Wizard","WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule","WordPress Coupon Plugin for Bloggers and Marketers – WP Offers","WordPress Dev Powers – ACF Color Coded Field Types Plugin","WordPress Dev Powers – Element Selector jQuery Powers Plugin","WordPress Directory Plugin For Business Listings –  WP Local Plus","WordPress Everse Starter Sites – Elementor Templates","WordPress Gallery Plugin – Edge Photo Gallery","WordPress Google Translate","WordPress Reviews by ReviewPress","WordPress SEO Checklist","WordPress Slider Block Gutenslider","WordPress Translation plugin for Post, Pages \u0026 WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator.","WordPress WooCommerce Sync for Google Sheet","WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto","Wp My Admin Bar","XT Ajax Add To Cart for WooCommerce","XT Floating Cart for WooCommerce","XT Points \u0026 Rewards for WooCommerce","XT Quick View for WooCommerce","XT Variation Swatches for WooCommerce","YASR – Yet Another Star Rating Plugin for WordPress","YT Player – Embed and Customize Video Players","Yatri Tools","Zip Code Redirect","annasta Filters for WooCommerce","azw woocommerce file uploads","bbResolutions","eaSYNC Booking – Hotels, Restaurants \u0026 Car Rentals","jav's – WooCommerce and Trello integration WooTrello","kk Star Ratings – Rate Post \u0026 Collect User Feedbacks","wGauge – Free Version","Кнопка ЮMoney"],"published":"2024-10-16","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-04-08","vendors":["5starplugins","9brada6","actuaryzask","aguilerasoft","aharonyan","ahmed17","akdevs","alekv","alex-ye","alexmoss","alleythemes","alphabposervice","anasbinmukim","andyabelow","anfrageformular","ankitmaru","annastaa","anssilaitila","atakanoz","attest","avidthemes/","badhonrocks","bandido","bavokoservices","bdthemes","beeneeb","benmoreassynt","bestpluginswordpress","bfintal","bilaltas","blackandwhitedigital","blockmeister","blockspare","blockypage","boltonstudios","boriscolombier/","bouncingsprout","bplugins","brandonfire","brightvesseldev","buttonizer","bycrik","cadudecastroalves","cebbi","chetmac","chillichalli","cleverplugins","clickervolt","cliffpaulick","closemarketing/","closetechnology","cloudliving","cloudsponge","cmbibby/","co2ok","codeies","coderpress","codesavory","codexonics","commercepundit","creativethemeshq","cromer12","cyberhobo","cypressnorth","daigo75","dam6pl","damian-gora","dangub86","danielealessandra","danieliser","danish-ali","daniyalahmedk","darell","dashlabsltd","davidanderson","dejanmarkovic","deothemes","dgwyer","dipcode","diviframework","divisumo","djenh","dotrex","dots","dovyp","dreamfox","drosendo","dudo","dvizhenia","edgegalleryplugin","eedee","ejslondon/","ekanath","elbisnero","elementinvader","elliotvs","equalizedigital","essekia","ethereumicoio","fastaf/","flexithemes","fooplugins","foxmoon","frenify","frostbourn","fsruslan","fullworks","gallerycreator","galoover","getsparrow","gfirem","ggedde","ggriesser","ggwicz","giladtakoni","gkher/","gloriousthemes","glowlogix","gowebsmarty","greenjaymedia","h3technologies","halmat","hiddenpearls","hqtheme","humblethemes","ibenic","iksstudio","imtiazrayhan","infornweb","infosatech","inputwp","interactivegeomaps","interfacelab","intoxstudio","invisnet","irkanu","ivacy","ivan_paulin","ivanchernyakov","jamesparkninja","janthielemann","janwyl","javmah","jaydeep-nimavat","jburleigh1","jcodex","jetixwp","jkohlbach","johnc1979","josevega","jurski","jwebsol","jwind","kaggdesign","kaira","kaizencoders","kartechify","kartikparmar","kartikparmar/","kenanfallon","khothemes","kitthemes","kkikuchi1220","koen12344","krsp","kylegilman","ldninjas/","limbcode","linekal","listplus","litonice13","livemesh","lkoudal","lostboy7","lukeseager","lynn999","maartenbelmans","maciejbak85","majick","majick/","maltathemes","mantrabrain","marcqueralt","marviorocha","masterblocks","matstars","matthias-reuter","mattpramschufer","maurolopes/","maxsdesign","mberding","mbrown24","mcurly","mdedev","meeplugins","melapress","meowcrew","mhmrajib","mihail-barinov","mikebels","mikewire_rocksolid","milmor","milukove","milukove/","mnelson4","modulemasters","mohammedrezq","mohsinoffline","mojofywp","moomooagency","mte90","muhammad-rehman","multicollab","mumarym1985","munirkamal","mvvapps/","nasirahmed","nicheaddons","ninjalibs","nitin247","nplugins","oceanwp","oceas","olezhyk5","oloyede-jamiu","pagebuildersandwich","pagup","passionatebrains","pasyuk","patrickgarman","patrickposner","paulio21","penguininitiatives","peterschulznl","pippozanardo","pluginandplay","plugins360","pluginsware","pmbaldha","pmbaldha/","pootlepress","pootlepress/","popeating","powerfulwp","prasadkirpekar","prelc","premmerce","princeahmed","properfraction","protectyouruploads","proteusthemes","rafacarvalhido","rafalosinski","rankbear","rebelcode","renaudbod","richard-b","risetheme","ronena100","royalnavneet","saadiqbal","sakurapixel","salttechno","samdani","samuelsilvapt","sangaran","scrollsequence","seancarrico","sebet","sebet/","seezee","setka","shabti","shamim51","shawoninfo","shelob9","sindyakinsergei","sj_o","sjaved","skshaikat","skyminds","slidedeck","smartwpress","smgteam","snazzythemes","sonalsinha21","sorsawo","sovstack","spartac","sslatlas","sslzen","starfishwp","staxwp","stellarwp","stevehenty","stevejburge","streamweasels","stylingwebben","surbma","svovaf","switcorp","syntactics","takanakui","tauhidpro","theafricanboss","theafricanboss/","thecodechime","theeventscalendar","themeisle","themekraft","themelocation","themesei","themesty","themeythemes","therealwebdisrupt","thijzie","thinleek","tickera","tobias_conrad","tobias_conrad/","toddhalfpenny","tonyzeoli","tprintyedisonave","tranzly","tribalnerd","tripetto","tropicalista","ultimateblocks","ultradevs","unitecms","upfiv","uriahs-victor","usmanaliqureshi","vanyukov","vernal","versacomp","vincoit","vinod-dalvi","vohotv/","w3scloud","walkerwp","webba-agency","webheadllc","webmuehle","weconnectcode","wgauge","whiteshadow","wisersteps","woodyhayday","woopops","wordplus","wordpresschef","wp-making","wpbits","wpchill","wpcohort","wpcohort/","wpconedev","wpdelicious","wpdever","wpdevpowers","wpdive","wpeka-club","wpengine","wpeventpartners/","wpgeniuz","wphrmanager","wpjoli","wpkube","wplegalpages","wpmagics","wpmoose","wpmunich","wproyal","wpsaad","wpscripts","wpsoul","wpt00ls","wptb","wptravelengine","wpvibes","wpwebinfotech","wupo","xjohnyk","xplodedthemes","xyulex","zeetheme","zerozendesign"]},"summary":"Attackers can access debug logs and modify database options in WordPress plugins using the vulnerable Freemius SDK due to missing authorization checks.","url":"https://insights.sbomify.com/CVE-2022-4974/"}