CVE-2022-1020 is a critical vulnerability affecting the Product Table for WooCommerce WordPress plugin versions prior to 3.1.2. It allows unauthenticated attackers to execute arbitrary functions due to missing authorization, CSRF checks, and improper validation of the callback parameter in an AJAX action. This vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating a severe risk with a network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. Its high EPSS and FAUCET Risk Score further emphasize its significant threat. While not currently listed on CISA's KEV catalog, exploit intelligence shows available Nuclei templates for detection. The vulnerability has garnered significant community discussion, with 11 mentions, suggesting active awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.1.2CPE matchmatch criteria | cpe:2.3:a:codeastrology:woo_product_table:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.