Vulnerabilities > CVE-2022-36284 - Authorization Bypass Through User-Controlled Key vulnerability in Storeapps Affiliate for Woocommerce

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

storeapps

CWE-639

NVD

Published: 2022-08-05

Updated: 2022-08-10

Summary

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on the user profile page.

Vulnerable Configurations

Part	Description	Count
Application	Storeapps Storeapps Affiliate FOR Woocommerce 1.0.0 Storeapps Affiliate FOR Woocommerce 1.1.0 Storeapps Affiliate FOR Woocommerce 1.2.0 Storeapps Affiliate FOR Woocommerce 1.2.1 Storeapps Affiliate FOR Woocommerce 1.3.0 Storeapps Affiliate FOR Woocommerce 1.3.1 Storeapps Affiliate FOR Woocommerce 1.3.2 Storeapps Affiliate FOR Woocommerce 1.3.3 Storeapps Affiliate FOR Woocommerce 1.3.4 Storeapps Affiliate FOR Woocommerce 1.4.0 Storeapps Affiliate FOR Woocommerce 1.4.1 Storeapps Affiliate FOR Woocommerce 1.5.0 Storeapps Affiliate FOR Woocommerce 1.5.1 Storeapps Affiliate FOR Woocommerce 1.6.0 Storeapps Affiliate FOR Woocommerce 1.6.1 Storeapps Affiliate FOR Woocommerce 1.6.2 Storeapps Affiliate FOR Woocommerce 1.7.0 Storeapps Affiliate FOR Woocommerce 1.7.1 Storeapps Affiliate FOR Woocommerce 1.8.0 Storeapps Affiliate FOR Woocommerce 1.8.1 Storeapps Affiliate FOR Woocommerce 1.9.0 Storeapps Affiliate FOR Woocommerce 1.9.1 Storeapps Affiliate FOR Woocommerce 1.10.0 Storeapps Affiliate FOR Woocommerce 1.10.1 Storeapps Affiliate FOR Woocommerce 2.0.0 Storeapps Affiliate FOR Woocommerce 2.0.1 Storeapps Affiliate FOR Woocommerce 2.1.0 Storeapps Affiliate FOR Woocommerce 2.2.0 Storeapps Affiliate FOR Woocommerce 2.3.0 Storeapps Affiliate FOR Woocommerce 2.3.1 Storeapps Affiliate FOR Woocommerce 2.4.0 Storeapps Affiliate FOR Woocommerce 2.4.1 Storeapps Affiliate FOR Woocommerce 2.4.2 Storeapps Affiliate FOR Woocommerce 2.4.3 Storeapps Affiliate FOR Woocommerce 2.5.0 Storeapps Affiliate FOR Woocommerce 2.5.1 Storeapps Affiliate FOR Woocommerce 2.6.0 Storeapps Affiliate FOR Woocommerce 2.7.0 Storeapps Affiliate FOR Woocommerce 2.7.1 Storeapps Affiliate FOR Woocommerce 2.7.2 Storeapps Affiliate FOR Woocommerce 2.8.0 Storeapps Affiliate FOR Woocommerce 2.8.1 Storeapps Affiliate FOR Woocommerce 2.8.2 Storeapps Affiliate FOR Woocommerce 2.8.3 Storeapps Affiliate FOR Woocommerce 2.8.4 Storeapps Affiliate FOR Woocommerce 3.0.0 Storeapps Affiliate FOR Woocommerce 3.0.1 Storeapps Affiliate FOR Woocommerce 3.0.2 Storeapps Affiliate FOR Woocommerce 3.1.0 Storeapps Affiliate FOR Woocommerce 3.2.0 Storeapps Affiliate FOR Woocommerce 3.2.1 Storeapps Affiliate FOR Woocommerce 3.2.2 Storeapps Affiliate FOR Woocommerce 3.3.0 Storeapps Affiliate FOR Woocommerce 3.3.1 Storeapps Affiliate FOR Woocommerce 3.3.2 Storeapps Affiliate FOR Woocommerce 3.4.0 Storeapps Affiliate FOR Woocommerce 3.4.1 Storeapps Affiliate FOR Woocommerce 3.4.2 Storeapps Affiliate FOR Woocommerce 3.5.0 Storeapps Affiliate FOR Woocommerce 3.5.1 Storeapps Affiliate FOR Woocommerce 3.5.2 Storeapps Affiliate FOR Woocommerce 3.5.3 Storeapps Affiliate FOR Woocommerce 3.5.4 Storeapps Affiliate FOR Woocommerce 3.6.0 Storeapps Affiliate FOR Woocommerce 3.7.0 Storeapps Affiliate FOR Woocommerce 3.7.1 Storeapps Affiliate FOR Woocommerce 3.8.0 Storeapps Affiliate FOR Woocommerce 3.9.0 Storeapps Affiliate FOR Woocommerce 3.9.1 Storeapps Affiliate FOR Woocommerce 3.10.0 Storeapps Affiliate FOR Woocommerce 3.11.0 Storeapps Affiliate FOR Woocommerce 3.12.0 Storeapps Affiliate FOR Woocommerce 3.13.0 Storeapps Affiliate FOR Woocommerce 4.0.0 Storeapps Affiliate FOR Woocommerce 4.0.1 Storeapps Affiliate FOR Woocommerce 4.1.0 Storeapps Affiliate FOR Woocommerce 4.2.0 Storeapps Affiliate FOR Woocommerce 4.2.1 Storeapps Affiliate FOR Woocommerce 4.3.0 Storeapps Affiliate FOR Woocommerce 4.4.0 Storeapps Affiliate FOR Woocommerce 4.4.1 Storeapps Affiliate FOR Woocommerce 4.5.0 Storeapps Affiliate FOR Woocommerce 4.5.2 Storeapps Affiliate FOR Woocommerce 4.6.0 Storeapps Affiliate FOR Woocommerce 4.6.1 Storeapps Affiliate FOR Woocommerce 4.7.0	86

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References