CVE-2022-4974: 5starplugins easy_age_verify Missing Authorization

CVSS: 6.3v3.1MediumDeferred

Published 16-10-2024Last modified 08-04-2026

Vulnerability summary

CVE-2022-4974 is a medium (CVSS 6.3) Missing Authorization vulnerability in 5starplugins easy_age_verify. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 37% of scored vulnerabilities.

Overall risk

25/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.3/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.44%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

16-10-2024
PublishedVulnerability first disclosed.
08-04-2026
Last modifiedVulnerability information updated.

Description

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

CVSS metrics

3 scores · 3 sources · 1 version

v3.16.3

EPSS trend

Probability

0.44%

Chance of exploitation in the next 30 days

Percentile

37%

Versus all other CVEs

30-day change

0.00 pp

From 0.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Affected systems

Dots14 products

advanced menu manager pro – built for content-heavy wordpress sites to add, filter, lock, and edit menus easilyAll versions (No fix recorded)
banner management, product slider, product carousel for woocommerce< 2.2.3
digital goods (checkout field editor) for woocommerce checkout< 3.6.4
dynamic pricing and discount rules for woocommerce< 2.2.3
enhanced ecommerce google analytics for woocommerce< 3.6.3

Show all 14

Deothemes7 products

amela< 1.0.5
arendelle< 1.1.3
everse< 1.8.6
meridia< 2.2.7
nokke< 1.0.11

Show all 7

Bplugins6 products

Show all 6

Alphabposervice4 products

easy code snippets< 1.0.1
easy math captcha for cf7All versions (No fix recorded)
easy newsletter signups< 1.0.4
easy post views count< 1.0.5

Ethereumicoio4 products

cryptocurrency product for woocommerce< 3.14.6
ether and erc20 tokens woocommerce payment gateway< 4.12.9
ethereum wallet< 4.0.9
ethereumico< 2.3.11

Fullworks4 products

display eventbrite events< 4.4.8
get directions map< 2.15.8
quick paypal payments< 5.7.22
stop contact form 7 spam & wpforms spam – free protection< 1.3.2

Ibenic4 products

change prices with time for woocommerceAll versions (No fix recorded)
live scores for sportspressAll versions (No fix recorded)
simple giveaways – grow your business, email lists and traffic with contests< 2.42.1
simple sponsorshipsAll versions (No fix recorded)

5starplugins3 products

easy_age_verify< 1.6.1
featured images in rss for mailchimp & more< 1.5.9
marijuana age verify< 1.3.1

Ahmed173 products

cf7 constant contact fields mappingAll versions (No fix recorded)
menu item schedulerAll versions (No fix recorded)
rw divi unite gallery≤ 1.0

Commercepundit3 products

cp simple newsletterAll versions (No fix recorded)
custom registration and custom login forms with new recaptchaAll versions (No fix recorded)
run time image resizingAll versions (No fix recorded)

Dotrex3 products

aquarella liteAll versions (No fix recorded)
power ups for elementor< 1.2.2
powerfolio – portfolio & image gallery for elementor< 2.1.7

Fooplugins3 products

gallery by foogallery< 2.1.34
lightbox & modal popup wordpress plugin – foobox< 2.7.17
notification bar, announcement and cookie notice wordpress plugin – foobar< 2.1.15

Gfirem3 products

gfirem action afterAll versions (No fix recorded)
gfirem advance searchAll versions (No fix recorded)
gfirem fieldsAll versions (No fix recorded)

Gowebsmarty3 products

Infornweb3 products

Anssilaitila2 products

Badhonrocks2 products

Bdthemes2 products

prime slider – addons for elementor< 2.7.0
ultimate post kit addons for elementor< 2.9.1

Blackandwhitedigital2 products

bookpress – for book authors< 1.2.3
treepress – easy family trees & ancestor profiles< 2.0.21

Boriscolombier/2 products

stewoo – super transactional emails for woocommerce< 1.2.4
woocommerce payplugAll versions (No fix recorded)

Bouncingsprout2 products

block, suspend, report for buddypress< 3.3.3
ultimeter< 2.7.6

Cleverplugins2 products

security ninja – wordpress security & firewall< 5.135
seo_booster< 3.8.5

Co2ok2 products

climateclick: climate action for all≤ 1.0.9.21
south pole: climate action now< 1.0.2.0

Coderpress2 products

Damian-gora2 products

fibosearch – ajax search for woocommerce< 1.17.0
justified gallery< 1.5.1

Dgwyer2 products

Dreamfox2 products

Essekia2 products

Ggriesser2 products

fast wordpressAll versions (No fix recorded)
get feedback from visitors – wp feedback suite pluginAll versions (No fix recorded)

Giladtakoni2 products

the best plugin for restrict content, support all custom post types and elementor – password protectedAll versions (No fix recorded)
wpmailer – the best mail builder, no more core for your emails support elementor, cf7 forms etc…All versions (No fix recorded)

Gloriousthemes2 products

glorious services & supportAll versions (No fix recorded)
gloriousthemes starter sitesAll versions (No fix recorded)

Hiddenpearls2 products

custom login page customizer< 2.1.8
wordpress reviews by reviewpressAll versions (No fix recorded)

9brada61 product

tabs with recommended posts (widget)All versions (No fix recorded)

Actuaryzask1 product

azw woocommerce file uploadsAll versions (No fix recorded)

Aguilerasoft1 product

conversion de moneda woocommerceAll versions (No fix recorded)

Aharonyan1 product

guest posting / frontend posting / front editor – wp front user submit< 3.4.1

Akdevs1 product

genealogical tree – family tree & ancestry for wordpress≤ 2.1.5

Alekv1 product

pixel manager for woocommerce – conversion tracking, google ads, ga4, tiktok, dynamic remarketing< 1.14.3

Alex-ye1 product

bbresolutionsAll versions (No fix recorded)

Alexmoss1 product

opensea< 1.0.3

Alleythemes1 product

alley business toolkit< 1.1.8

Anasbinmukim1 product

mailchimp managerAll versions (No fix recorded)

Andyabelow1 product

media library file download< 1.1

Anfrageformular1 product

anfrageformular – multi step drag & drop formular builder – leadgenerierungAll versions (No fix recorded)

Ankitmaru1 product

advanced page visit counter – most wanted analytics plugin for wordpress< 6.0.0

Annastaa1 product

annasta filters for woocommerce< 1.5.0

Atakanoz1 product

performance kitAll versions (No fix recorded)

Attest1 product

lms plugin – elearning, online courses by attestAll versions (No fix recorded)

Avidthemes/1 product

blog sidebar widgetAll versions (No fix recorded)

Bandido1 product

ukrposhta< 1.6.18

Bavokoservices1 product

bavoko seo tools – all-in-one wordpress seoAll versions (No fix recorded)

Beeneeb1 product

insert or embed articulate content into wordpress< 4.3000000016

Benmoreassynt1 product

dancepress (trwa)≤ 3.1.2

Bestpluginswordpress1 product

one click loginAll versions (No fix recorded)

Bfintal1 product

stackable – page builder gutenberg blocks< 3.1.5

Bilaltas1 product

codekit – custom codes editor< 2.3

Blockmeister1 product

blockmeister – block pattern builder< 3.0.5

Blockspare1 product

blockspare — news, magazine and blog addons for (gutenberg) block editor< 2.0.1

Blockypage1 product

blockypage – gutenberg based page builderAll versions (No fix recorded)

Boltonstudios1 product

easy zillow reviews< 1.4.1

Brandonfire1 product

blocked in china | check if your site is available in the chinese mainland< 1.0.3

Brightvesseldev1 product

quick event manager< 9.2.17

Buttonizer1 product

buttonizer – floating menus, sticky buttons, & popup builder< 2.6.3

Bycrik1 product

tiered pricing table for woocommerce< 2.6.1

Cadudecastroalves1 product

wp link bio< 1.4.5

Cebbi1 product

unakit< 1.2.4.2

Chetmac1 product

airpressAll versions (No fix recorded)

Chillichalli1 product

tarot card oracle< 1.0.6

Clickervolt1 product

clickervolt – affiliate links & click tracking for performance marketersAll versions (No fix recorded)

Cliffpaulick1 product

tk smugmug slideshow shortcodeAll versions (No fix recorded)

Closemarketing/1 product

sync ecommerce neoAll versions (No fix recorded)

Closetechnology1 product

connect woocommerce shop to erp/crm, verifactu and eu/vat compliance< 2.1

Cloudliving1 product

affiliate link builder plugin for amazon associates – review engineAll versions (No fix recorded)

Cloudsponge1 product

better sharing≤ 1.7.1

Cmbibby/1 product

automizy gravity formsAll versions (No fix recorded)

Codeies1 product

full page blog designerAll versions (No fix recorded)

Codesavory1 product

knowledge base documentation & wiki plugin – basepress docs< 2.15.14

Codexonics1 product

prime mover – migrate wordpress website & backups< 1.5.0

Creativethemeshq1 product

blocksy companion< 1.8.20

Cromer121 product

easy prayerAll versions (No fix recorded)

Cyberhobo1 product

geo_mashup< 1.13.6

Cypressnorth1 product

payment gateway for payfabricAll versions (No fix recorded)

Daigo751 product

eu vat assistant for woocommerce< 2.0.28.220224

Dam6pl1 product

advanced database replacerAll versions (No fix recorded)

Dangub861 product

ant admin notices for teamAll versions (No fix recorded)

Danielealessandra1 product

da reactions< 3.20.2

Danieliser1 product

user menus – nav menu visibility< 1.2.9

Danish-ali1 product

wpoptin – ai-powered top bars, popups & lead generation≤ 1.2.3

Daniyalahmedk1 product

fuse_social_floating_sidebar< 5.4.3

Darell1 product

hasium< 1.6.5

Dashlabsltd1 product

yasr – yet another star rating plugin for wordpress< 2.0.2

Davidanderson1 product

internal link juicer: seo auto linker for wordpress< 1.3.0

Dejanmarkovic1 product

wordpress buffer – hypesocial. social media auto post, social media auto publish and schedule< 2020.1.0

Dipcode1 product

wp post blockAll versions (No fix recorded)

Diviframework1 product

footer plugin for diviAll versions (No fix recorded)

Divisumo1 product

ultimate divi modules suite – divi sumo liteAll versions (No fix recorded)

Djenh1 product

nitek carousel slider cool transitionsAll versions (No fix recorded)

Dovyp1 product

page builder for gutenberg – starterblocksAll versions (No fix recorded)

Drosendo1 product

smart variations images & swatches for woocommerce< 5.1.10

Dudo1 product

comments not replied to< 1.5.3

Dvizhenia1 product

social kitAll versions (No fix recorded)

Edgegalleryplugin1 product

wordpress gallery plugin – edge photo galleryAll versions (No fix recorded)

Eedee1 product

wordpress slider block gutenslider< 5.7.0

Ejslondon/1 product

awesome sslAll versions (No fix recorded)

Ekanath1 product

wp gratifyAll versions (No fix recorded)

Elbisnero1 product

events calendar registrationAll versions (No fix recorded)

Elementinvader1 product

widget detector for elementor< 1.2.0

Elliotvs1 product

coupon affiliates – affiliate plugin for woocommerce< 4.16.4

Equalizedigital1 product

equalize digital accessibility checker – wcag, ada, eaa and section 508 compliance< 1.2.8

Fastaf/1 product

fast checkout for woocommerce< 1.1.17

Flexithemes1 product

wordpress seo checklistAll versions (No fix recorded)

Foxmoon1 product

cartoon urlAll versions (No fix recorded)

Frenify1 product

categorify – wordpress media library category & file manager< 1.0.5

Frostbourn1 product

responsive social slider widgetAll versions (No fix recorded)

Fsruslan1 product

feedbackscout: the easiest way to collect, prioritise, manage and track customer feedback.All versions (No fix recorded)

Gallerycreator1 product

mixed media gallery blocks< 2.3.6

Galoover1 product

wordpress animation plugin – animated everythingAll versions (No fix recorded)

Getsparrow1 product

sparrow: product reviews and ratings for woocommerceAll versions (No fix recorded)

Ggedde1 product

modern designs for gravity formsAll versions (No fix recorded)

Ggwicz1 product

product customer list for woocommerce< 3.0.0

Gkher/1 product

impexium single sign onAll versions (No fix recorded)

Glowlogix1 product

wp frontend profile< 1.2.5

Greenjaymedia1 product

seo audit – wp site auditor< 1.2.5

H3technologies1 product

wordpress woocommerce sync for google sheetAll versions (No fix recorded)

Halmat1 product

wp emailyAll versions (No fix recorded)

Hqtheme1 product

hqtheme extraAll versions (No fix recorded)

Humblethemes1 product

learnmoreAll versions (No fix recorded)

Iksstudio1 product

iks menu – wordpress category accordion menu & faqs< 1.9.2

Imtiazrayhan1 product

wp coupons and deals – coupon plugin for affiliate marketers< 3.1.12

Infosatech1 product

revivepress – keep your old content evergreen< 1.3.1

Inputwp1 product

availability datepicker – booking calendar for contact form 7 – input wp≤ 2.1

131 vendors · 200 products · Showing 200 of 1240. Use Open JSON for the complete list.

References

7 links

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities