CVE-2022-2446

🗓️ 13 Sep 2024 15:10:43Reported by WordfenceType

The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. Authenticated attackers with administrative privileges can call files using a PHAR wrapper to deserialize and call arbitrary PHP Objects, leading to malicious actions, given a POP chain is present. Uploading a file with the serialized payload is also required

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-2446	13 Sep 202415:15	–	attackerkb
Circl	CVE-2022-2446	13 Sep 202417:58	–	circl
CNNVD	WordPress plugin WP Editor 代码问题漏洞	13 Sep 202400:00	–	cnnvd
Cvelist	CVE-2022-2446 WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization	13 Sep 202415:10	–	cvelist
EUVD	EUVD-2022-34707	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2446	13 Sep 202415:15	–	nvd
Patchstack	WordPress WP Editor Plugin <= 1.2.9 is vulnerable to PHP Object Injection	13 Sep 202400:00	–	patchstack
Patchstack	WordPress WP Editor plugin <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization vulnerability	13 Sep 202406:18	–	patchstack
Positive Technologies	PT-2024-11530 · WordPress · Wp Editor	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2022-2446	5 Feb 202521:21	–	redhatcve

NVD

Vulners

Vulnrichment

Node

benjaminrojas wp_editorRange<1.2.9.1wordpress

[
  {
    "vendor": "benjaminprojas",
    "product": "WP Editor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f3555702-4427-4569-8fd6-f84113593e9d
plugins	www.plugins.trac.wordpress.org/changeset/3151053/

08 Apr 2026 17:32Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.2

EPSS0.01063

SSVC

CWE-502