Vulners
Lucene search
CVE-2022-4265
๐๏ธย 06 Mar 2023ย 13:33:59Reported byย WPScanTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 54ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2022-4265 | 6 Mar 202316:12 | โ | circl |
 | WordPress plugin Replyable ไปฃ็ ้ฎ้ขๆผๆด | 6 Mar 202300:00 | โ | cnnvd |
 | CVE-2022-4265 Replyable < 2.2.10 - Subscriber+ PHP Object Injection | 6 Mar 202313:33 | โ | cvelist |
 | EUVD-2022-51621 | 3 Oct 202520:07 | โ | euvd |
 | CVE-2022-4265 | 6 Mar 202314:15 | โ | nvd |
 | CVE-2022-4265 | 6 Mar 202314:15 | โ | osv |
 | WordPress Postmatic Plugin < 2.2.10 is vulnerable to PHP Object Injection | 7 Mar 202300:00 | โ | patchstack |
 | Cross site request forgery (csrf) | 6 Mar 202314:15 | โ | prion |
 | PT-2023-14142 ยท WordPress ยท Replyable | 6 Mar 202300:00 | โ | ptsecurity |
 | CVE-2022-4265 | 22 May 202523:52 | โ | redhatcve |
10
Node
[
{
"vendor": "Unknown",
"product": "Replyable",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.2.10"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| action | request body | wp-admin/admin-ajax.php | The Replyable WordPress plugin before 2.2.10 does not validate the class name in prompt_dismiss_notice and lacks CSRF protection, enabling object injection by any authenticated user (e.g., subscriber) and potentially via CSRF. | CWE-352 |
| class | request body | wp-admin/admin-ajax.php | The Replyable WordPress plugin before 2.2.10 does not validate the class name in prompt_dismiss_notice and lacks CSRF protection, enabling object injection by any authenticated user (e.g., subscriber) and potentially via CSRF. | CWE-352 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Mar 2025 16:15Current
8.7High risk
Vulners AI Score8.7
CVSS 3.18.8
EPSS0.00116
SSVC