Lucene search
+L

CVE-2022-4060

🗓️ 16 Jan 2023 15:38:05Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 243 Views🌐 WEB

The User Post Gallery WordPress plugin allows visitors to run code

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
User Post Gallery Plugin RCE
21 Dec 202300:00
–bdu_fstec
circl
Circl
CVE-2022-4060
16 Jan 202318:24
–circl
cnnvd
CNNVD
WordPress Plugin User Post Gallery Code Injection Vulnerability
16 Jan 202300:00
–cnnvd
cvelist
Cvelist
CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE
16 Jan 202315:38
–cvelist
kitploit
Kitploit
UPGer
31 Oct 202623:13
–kitploit
kittysploit
KittySploit
WordPress User Post Gallery <=2.19 - Remote Code Execution Detection
28 Jul 202611:27
–kittysploit
nuclei
Nuclei
WordPress User Post Gallery <=2.19 - Remote Code Execution
2 Nov 202602:03
–nuclei
nvd
NVD
CVE-2022-4060
16 Jan 202316:15
–nvd
osv_cve
osv_cve
CVE-2022-4060
16 Jan 202316:15
–osv_cve
prion
Prion
Code injection
16 Jan 202316:15
–prion
Rows per page
NVD
Vulners
Node
odudeuser_post_galleryRange≤2.19wordpress
[
  {
    "vendor": "Unknown",
    "product": "User Post Gallery",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "2.19"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
fieldquery paramwp-admin/admin-ajax.phpRemote code execution via crafted callback field in admin-ajax.php; user-provided field triggers execution of arbitrary code (e.g., via PHP exec).CWE-77, CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:19Current
9.5Critical risk
Vulners AI Score9.5
CVSS 3.19.8
EPSS0.42723
SSVC
243