CVE-2022-3477Active Exploitation(newsmag_project / newsmag)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for newsmag_project newsmag systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address

newsmag_project CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-287

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

newsmag
newspaper
tagdiv_composer

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

newsmag_project newspaper_project tagdiv_composer_project

Products

newsmagnewspapertagdiv_composer

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

http://ctiwatch.cloud/alerts

Full discourse1 post

CTIWatch@ctiwatchcloud178d
Active Exploitation
🚨 [HIGH] Active exploitation detected: CVE-2022-3477 Exploit in the wild confirmed for CVE-2022-3477 (CVSS null). The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress them... 🔗 http://ctiwatch.cloud/alerts #ZeroDay #ExploitInWild #CyberSecurity
Post summary
The post reports active exploitation of CVE-2022-3477 against the tagDiv Composer WordPress plugin (pre‑3.5) with a link to an alert, yet it offers no PoC, exploit code, or patch information.
0000080
5.6K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	newsmag_project	newsmag	-	wordpress	-
App	newspaper_project	newspaper	-	wordpress	-
App	tagdiv_composer_project	tagdiv_composer	-	wordpress	-

Explore more

Back to dashboard newsmag_project CVEs newspaper_project CVEs tagdiv_composer_project CVEs newsmag vulnerabilities