The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af - Exploit, Third Party Advisory |
07 Nov 2023, 03:58
Type | Values Removed | Values Added |
---|---|---|
CWE |
Information
Published : 2023-01-30 21:15
Updated : 2024-11-21 07:35
NVD link : CVE-2022-4680
Mitre link : CVE-2022-4680
CVE.ORG link : CVE-2022-4680
JSON object : View
Products Affected
revive
- revive_old_posts
CWE
No CWE.