Vulnerabilities > CVE-2022-40700 - Server-Side Request Forgery (SSRF) vulnerability in multiple products

Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet – A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP – Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply – Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder – Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.

Vulnerable Configurations

Part	Description	Count
Application	Millionclues Millionclues Admin CSS MU 1.0 Millionclues Admin CSS MU 1.01 Millionclues Admin CSS MU 2.0 Millionclues Admin CSS MU 2.1 Millionclues Admin CSS MU 2.2 Millionclues Admin CSS MU 2.3 Millionclues Admin CSS MU 2.4 Millionclues Admin CSS MU 2.5 Millionclues Admin CSS MU 2.6 Millionclues Custom Login Admin Front END CSS 1.0 Millionclues Custom Login Admin Front END CSS 1.01 Millionclues Custom Login Admin Front END CSS 1.2 Millionclues Custom Login Admin Front END CSS 1.3 Millionclues Custom Login Admin Front END CSS 1.3.1 Millionclues Custom Login Admin Front END CSS 1.4 Millionclues Custom Login Admin Front END CSS 1.4.1	16
Application	Deano Deano AMP Toolbox - Deano AMP Toolbox 2.1.1	2
Application	Unihost Unihost Confirm Data - Unihost Confirm Data 1.0.7	2
Application	Agence-Press Agence Press CSS Adder - Agence Press CSS Adder 1.5.0	2
Application	Montonio Montonio Montonio FOR Woocommerce 1.0.1 Montonio Montonio FOR Woocommerce 1.0.2 Montonio Montonio FOR Woocommerce 1.0.3 Montonio Montonio FOR Woocommerce 1.0.4 Montonio Montonio FOR Woocommerce 1.0.5 Montonio Montonio FOR Woocommerce 1.0.6 Montonio Montonio FOR Woocommerce 1.0.7 Montonio Montonio FOR Woocommerce 1.1.0 Montonio Montonio FOR Woocommerce 1.1.1 Montonio Montonio FOR Woocommerce 1.1.2 Montonio Montonio FOR Woocommerce 1.1.3 Montonio Montonio FOR Woocommerce 1.1.4 Montonio Montonio FOR Woocommerce 1.1.5 Montonio Montonio FOR Woocommerce 1.1.6 Montonio Montonio FOR Woocommerce 1.2.0 Montonio Montonio FOR Woocommerce 1.2.1 Montonio Montonio FOR Woocommerce 2.0.2 Montonio Montonio FOR Woocommerce 2.0.3 Montonio Montonio FOR Woocommerce 2.0.5 Montonio Montonio FOR Woocommerce 2.0.6 Montonio Montonio FOR Woocommerce 2.0.7 Montonio Montonio FOR Woocommerce 2.0.9 Montonio Montonio FOR Woocommerce 2.1.0 Montonio Montonio FOR Woocommerce 2.1.1 Montonio Montonio FOR Woocommerce 2.2.0 Montonio Montonio FOR Woocommerce 2.2.2 Montonio Montonio FOR Woocommerce 2.3.0 Montonio Montonio FOR Woocommerce 2.3.1 Montonio Montonio FOR Woocommerce 2.3.2 Montonio Montonio FOR Woocommerce 2.3.3 Montonio Montonio FOR Woocommerce 3.0.1 Montonio Montonio FOR Woocommerce 3.0.2 Montonio Montonio FOR Woocommerce 3.0.3 Montonio Montonio FOR Woocommerce 3.0.4 Montonio Montonio FOR Woocommerce 3.0.5 Montonio Montonio FOR Woocommerce 3.0.6 Montonio Montonio FOR Woocommerce 3.0.7 Montonio Montonio FOR Woocommerce 3.0.8 Montonio Montonio FOR Woocommerce 3.0.9 Montonio Montonio FOR Woocommerce 4.0.0 Montonio Montonio FOR Woocommerce 4.0.1 Montonio Montonio FOR Woocommerce 4.0.2 Montonio Montonio FOR Woocommerce 4.0.3 Montonio Montonio FOR Woocommerce 4.0.4 Montonio Montonio FOR Woocommerce 4.0.5 Montonio Montonio FOR Woocommerce 4.0.6 Montonio Montonio FOR Woocommerce 4.0.7 Montonio Montonio FOR Woocommerce 4.0.8 Montonio Montonio FOR Woocommerce 4.0.9 Montonio Montonio FOR Woocommerce 4.1.0 Montonio Montonio FOR Woocommerce 4.1.1 Montonio Montonio FOR Woocommerce 4.1.2 Montonio Montonio FOR Woocommerce 4.1.3 Montonio Montonio FOR Woocommerce 4.1.4 Montonio Montonio FOR Woocommerce 4.1.5 Montonio Montonio FOR Woocommerce 4.1.6 Montonio Montonio FOR Woocommerce 4.1.7 Montonio Montonio FOR Woocommerce 4.1.8 Montonio Montonio FOR Woocommerce 4.1.9 Montonio Montonio FOR Woocommerce 4.2.0 Montonio Montonio FOR Woocommerce 4.2.1 Montonio Montonio FOR Woocommerce 4.2.2 Montonio Montonio FOR Woocommerce 5.0.0 Montonio Montonio FOR Woocommerce 5.0.1 Montonio Montonio FOR Woocommerce 5.0.2 Montonio Montonio FOR Woocommerce 5.0.3 Montonio Montonio FOR Woocommerce 5.0.4 Montonio Montonio FOR Woocommerce 5.0.5 Montonio Montonio FOR Woocommerce 5.0.6 Montonio Montonio FOR Woocommerce 5.0.7 Montonio Montonio FOR Woocommerce 6.0.0 Montonio Montonio FOR Woocommerce 6.0.1	72
Application	Frumph Frumph Phpfreechat - Frumph Phpfreechat 0.2.8	2
Application	Designmodo Designmodo Qards - Designmodo Qards 1.0	2
Application	Paulclark Paulclark Styles *	1
Application	Squidesma Squidesma Theme Minifier *	1
Application	Longwatchstudio Longwatchstudio Woosupply 1.0.0 Longwatchstudio Woosupply 1.1.0 Longwatchstudio Woosupply 1.2.0 Longwatchstudio Woosupply 1.2.1 Longwatchstudio Woosupply 1.2.2 Longwatchstudio Woovip 1.0.0 Longwatchstudio Woovip 1.0.1 Longwatchstudio Woovip 1.1.0 Longwatchstudio Woovip 1.1.2 Longwatchstudio Woovip 1.2.0 Longwatchstudio Woovip 1.3.1 Longwatchstudio Woovip 1.3.2 Longwatchstudio Woovip 1.3.4 Longwatchstudio Woovip 1.3.5 Longwatchstudio Woovip 1.3.6 Longwatchstudio Woovip 1.3.8 Longwatchstudio Woovip 1.3.9 Longwatchstudio Woovip 1.4.0 Longwatchstudio Woovip 1.4.1 Longwatchstudio Woovip 1.4.2 Longwatchstudio Woovip 1.4.4 Longwatchstudio Woovirtualwallet 1.0.0 Longwatchstudio Woovirtualwallet 2.0.0 Longwatchstudio Woovirtualwallet 2.0.1 Longwatchstudio Woovirtualwallet 2.0.2 Longwatchstudio Woovirtualwallet 2.1.0 Longwatchstudio Woovirtualwallet 2.1.1 Longwatchstudio Woovirtualwallet 2.1.2 Longwatchstudio Woovirtualwallet 2.2.0 Longwatchstudio Woovirtualwallet 2.2.1	30
Application	Arcstone Arcstone AMO FOR WP Membership Management *	1
Application	Wpopal Wpopal Wpopal Core Features 1.5.4 Wpopal Wpopal Core Features 1.5.5 Wpopal Wpopal Core Features 1.5.6 Wpopal Wpopal Core Features 1.5.7 Wpopal Wpopal Core Features 1.5.8	5

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References