Lucene search
K

CVE-2022-4060

🗓️ 16 Jan 2023 15:38:05Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 130 Views🌐 WEB

The User Post Gallery WordPress plugin allows visitors to run code

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2022-4060
16 Jan 202318:24
circl
CNNVD
WordPress plugin User Post Gallery 代码注入漏洞
16 Jan 202300:00
cnnvd
Cvelist
CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE
16 Jan 202315:38
cvelist
Nuclei
WordPress User Post Gallery <=2.19 - Remote Code Execution
6 Jun 202603:01
nuclei
NVD
CVE-2022-4060
16 Jan 202316:15
nvd
OSV
CVE-2022-4060
16 Jan 202316:15
osv
Prion
Code injection
16 Jan 202316:15
prion
Prion
Open redirect
3 Jan 202315:15
prion
Positive Technologies
PT-2023-7904 · WordPress · User Post Gallery
16 Jan 202300:00
ptsecurity
RedhatCVE
CVE-2022-4060
23 May 202500:19
redhatcve
Rows per page
NVD
Vulners
Node
odudeuser_post_galleryRange2.19wordpress
[
  {
    "vendor": "Unknown",
    "product": "User Post Gallery",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "2.19"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
actionquery param/wp-admin/admin-ajax.phpPlugin allows arbitrary callback execution via user-supplied parameters in admin-ajax, enabling visited to run code on the site.
fieldquery param/wp-admin/admin-ajax.phpPlugin allows arbitrary callback execution via user-supplied parameters in admin-ajax, enabling visited to run code on the site.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Apr 2025 18:15Current
9.5High risk
Vulners AI Score9.5
CVSS 3.19.8
EPSS0.88723
SSVC
130