CVE-2022-33970: 
WordPress vulnerability analysis and mitigation

The vulnerability (CVE-2022-33970) is an Authenticated WordPress Options Change vulnerability affecting the Biplob018 Shortcode Addons plugin versions 3.1.2 and below for WordPress. The vulnerability was discovered and disclosed on July 25, 2022, and was fixed in version 3.2.0 (Patchstack).

The vulnerability is classified as a Broken Access Control issue with a CVSS v3.1 base score of 7.2 (HIGH). The vulnerability vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, high privileges required, no user interaction needed, and high impact on confidentiality, integrity, and availability (NVD).

The vulnerability could allow an authenticated user to execute higher privileged actions within the WordPress installation. The impact affects the confidentiality, integrity, and availability of the system, with all three aspects rated as High according to the CVSS scoring (Patchstack).

The vulnerability requires an authenticated user with administrator privileges to exploit. While the attack complexity is considered low, the requirement for high-level privileges reduces the immediate risk of widespread exploitation (NVD).

The recommended mitigation is to update the Shortcode Addons plugin to version 3.2.0 or later, which contains the fix for this vulnerability. The security issue is considered to have a low severity impact and is unlikely to be exploited (Patchstack).