CVE-2022-40700
Published: 19 January 2024
Summary
CVE-2022-40700 is a high-severity SSRF (CWE-918) vulnerability in Millionclues Admin Css Mu. Its CVSS base score is 8.2 (High).
Operationally, ranked in the top 26.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-40700 is a Server-Side Request Forgery vulnerability (CWE-918) affecting a long list of WordPress plugins and themes. Impacted components include Montonio for WooCommerce through version 6.0.1, Wpopal Core Features through 1.5.8, ArcStone through 4.6.6, WooVirtualWallet through 2.2.1, WooVIP through 1.4.4, WooSupply through 1.2.2, Theme Minifier through 2.0, Styles through 1.2.3, WordPress Page Builder – Qards through 1.0.5, PHPFreeChat through 0.2.8, Custom Login Admin Front-end CSS through 1.4.1, CSS Adder By Agence-Press through 1.5.0, Confirm Data through 1.0.7, AMP Toolbox through 2.1.1, and Admin CSS MU through 2.6. The flaw carries a CVSS 3.1 score of 8.2.
Unauthenticated remote attackers can exploit the issue over the network with low attack complexity. Successful exploitation allows the attacker to force the affected server to make arbitrary outbound requests, resulting in high impact to confidentiality and limited impact to integrity.
Patchstack maintains individual advisory entries for each affected plugin that document the SSRF conditions and link to updated releases where available.
The EPSS score rose from a low baseline to a peak of 0.1533 on 2025-01-22 before receding to the current value of 0.0073, indicating that exploitation interest increased after public disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-43971
Vulnerability details
Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for…
more
WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet – A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP – Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply – Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder – Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.
Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.
Validates server-side URLs and resource references to block SSRF attempts.
Detects server-side request forgery through monitoring of unexpected outbound connections.