Lucene search
WPScanCVELIST:CVE-2022-4043HistoryJan 09, 2023 - 10:13 p.m.
CVE-2022-4043 WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
2023-01-0922:13:30
WPScan
www.cve.org
cve-2022-4043
wordpress
admin+ php object injection
unserialize user input
high privilege users
php object injection
0.001 Low
EPSS
Percentile
36.8%
The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
CNA Affected
[
{
"vendor": "Unknown",
"product": "WP Custom Admin Interface",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "7.29"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2022-4043
2023-01-09 23:15:27
wpexploit
wpexploit
WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
2022-12-13 00:00:00
prion
prion
Design/Logic Flaw
2023-01-09 23:15:00
nvd
nvd
CVE-2022-4043
2023-01-09 23:15:27
wpvulndb
wpvulndb
WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
2022-12-13 00:00:00