The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af | Exploit Third Party Advisory |
Configurations
History
07 Nov 2023, 03:58
Type | Values Removed | Values Added |
---|---|---|
CWE |
Information
Published : 2023-01-30 21:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-4680
Mitre link : CVE-2022-4680
CVE.ORG link : CVE-2022-4680
JSON object : View
Products Affected
revive
- revive_old_posts
CWE
No CWE.