{"id":"CVE-2022-2389","state":"PUBLISHED","title":"Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation","description":"The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, allowing any authenticated users, such as subscriber to create automations","publishedAt":"2022-08-22T15:02:49.000Z","updatedAt":"2024-08-03T00:39:07.097Z","severity":null,"assigner":"WPScan","products":["Unknown Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami"],"affected":[{"vendor":"Unknown","product":"Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami","versions":[{"version":"2.1.2","status":"affected","lessThan":"2.1.2","versionType":"custom"}]}],"references":["https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9"],"weaknesses":["CWE-862","CWE-352"],"ingestedAt":"2026-10-29T19:50:01.354Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/2xxx/CVE-2022-2389.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-2389","state":"PUBLISHED","datePublished":"2022-08-22T15:02:49.000Z","dateUpdated":"2024-08-03T00:39:07.097Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2022-07-12T00:00:00.000Z"},"containers":{"cna":{"title":"Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation","descriptions":[{"lang":"en","value":"The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, allowing any authenticated users, such as subscriber to create automations"}],"affected":[{"vendor":"Unknown","product":"Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami","versions":[{"version":"2.1.2","status":"affected","lessThan":"2.1.2","versionType":"custom"}]}],"references":[{"url":"https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-352","description":"CWE-352 Cross-Site Request Forgery (CSRF)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","dateUpdated":"2022-08-22T15:02:49.000Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81"},"credits":[{"lang":"en","value":"Krzysztof Zając"}],"source":{"discovery":"EXTERNAL"},"x_generator":"WPScan CVE Generator","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"contact@wpscan.com","ID":"CVE-2022-2389","STATE":"PUBLIC","TITLE":"Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami","version":{"version_data":[{"version_affected":"<","version_name":"2.1.2","version_value":"2.1.2"}]}}]},"vendor_name":"Unknown"}]}},"credit":[{"lang":"eng","value":"Krzysztof Zając"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, allowing any authenticated users, such as subscriber to create automations"}]},"generator":"WPScan CVE Generator","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-862 Missing Authorization"}]},{"description":[{"lang":"eng","value":"CWE-352 Cross-Site Request Forgery (CSRF)"}]}]},"references":{"reference_data":[{"name":"https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9","refsource":"MISC","url":"https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T00:39:07.097Z"}}]}}}