Vulners
Lucene search
CVE-2022-3366
šļøĀ 31 Oct 2022Ā 00:00:00Reported byĀ WPScanTypeĀ 
Ā cvešĀ web.nvd.nist.govš°ļøĀ 2Ā Media mentionsšĀ 55Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | CVE-2022-3366 | 31 Oct 202219:38 | ā | circl |
 | WordPress plugin PublishPress Capabilities 代ē é®é¢ę¼ę“ | 31 Oct 202200:00 | ā | cnnvd |
 | CVE-2022-3366 PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection | 31 Oct 202200:00 | ā | cvelist |
 | EUVD-2022-42746 | 3 Oct 202520:07 | ā | euvd |
 | CVE-2022-3366 | 31 Oct 202216:15 | ā | nvd |
 | WordPress PublishPress Capabilities Plugin < 2.5.2 PHP Objection Injection Vulnerability | 1 Nov 202200:00 | ā | openvas |
 | WordPress PublishPress Capabilities Pro premium plugin <= 2.5.1 - Auth. PHP Objection Injection vulnerability | 10 Oct 202200:00 | ā | patchstack |
| WordPress PublishPress Capabilities plugin <= 2.5.1 - Auth. PHP Objection Injection vulnerability | 10 Oct 202200:00 | ā | patchstack |
 | Design/Logic Flaw | 31 Oct 202216:15 | ā | prion |
 | PT-2022-21796 Ā· Publishpress Ā· Publishpress Capabilities Pro | 31 Oct 202200:00 | ā | ptsecurity |
10
Node
[
{
"vendor": "Unknown",
"product": "PublishPress Capabilities ā User Role Access, Editor Permissions, Admin Menus",
"versions": [
{
"version": "2.5.2",
"status": "affected",
"lessThan": "2.5.2",
"versionType": "custom"
}
]
},
{
"vendor": "Unknown",
"product": "PublishPress Capabilities Pro",
"versions": [
{
"version": "2.5.2",
"status": "affected",
"lessThan": "2.5.2",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| import_file | upload data | /wp-admin/admin.php?page=pp-capabilities-backup | PHP object injection via unserialization of an imported file in a multisite WordPress setup; requires a gadget chain from another plugin to be present. | CWE-502 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 May 2025 21:15Current
7High risk
Vulners AI Score7
CVSS 3.17.2
EPSS0.00901
SSVC