Betheme CVE-2022-45352

MEDIUM

Missing Authorization (CWE-862)

2024-03-25 audit@patchstack.com

Authentication Bypass Betheme Muffingroup

5.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

1

CVE Published

Mar 25, 2024 - 12:15 cve.org

MEDIUM 5.4

DescriptionCVE.org

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

AnalysisAI

Missing Authorization vulnerability in Muffingroup Betheme.6.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authorization (CWE-862), which allows attackers to access resources or perform actions without proper authorization checks. Missing Authorization vulnerability in Muffingroup Betheme.6.1. Affected products include: Muffingroup Betheme. Version information: through 26.6.1..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement role-based access control, validate authorization on every request server-side, apply principle of least privilege.

More in Betheme

View all

CVE-2022-3861 HIGH This Week POC

The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via des

CVE-2026-65548 CRITICAL Act Now

Remote code execution in the Betheme WordPress theme (muffingroup) through version 28.4.2 allows a user holding a low-pr

CVE-2026-6261 HIGH This Week

Remote code execution in Betheme WordPress theme versions up to 28.4 allows authenticated attackers with author-level pr

CVE-2024-2694 HIGH This Week

The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via d

CVE-2022-45077 HIGH This Week

Auth. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch

CVE-2026-6262 MEDIUM This Month

Arbitrary file deletion via path traversal in Betheme WordPress theme version 28.4 and earlier allows authenticated cont

CVE-2026-6178 MEDIUM This Month

Stored cross-site scripting in the Betheme theme for WordPress (all versions through 28.4) allows authenticated attacker

CVE-2025-3077 MEDIUM This Month

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button shortcode and Custo

CVE-2023-29101 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low at

CVE-2022-45356 MEDIUM This Month

Missing Authorization vulnerability in Muffingroup Betheme.6.1. Rated medium severity (CVSS 5.4), this vulnerability is

CVE-2022-45351 MEDIUM This Month

Missing Authorization vulnerability in Muffingroup Betheme.6.1. Rated medium severity (CVSS 5.4), this vulnerability is

CVE-2024-5567 MEDIUM This Month

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to,

Same weakness CWE-862 – Missing Authorization

View all

CVE-2023-52163 HIGH POC

CVE-2025-6205 CRITICAL POC

CVE-2025-20362 HIGH POC

CVE-2017-9232 CRITICAL POC

CVE-2023-6875 CRITICAL POC

CVE-2024-4898 CRITICAL POC

CVE-2023-32117 CRITICAL POC

CVE-2020-36719 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2024-0012 CRITICAL POC

CVE-2023-46805 HIGH POC

Share

CVE-2022-45352 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy