Lucene search
WPScanCVELIST:CVE-2022-4302HistoryJan 02, 2023 - 9:49 p.m.
CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection
2023-01-0221:49:18
WPScan
www.cve.org
cve-2022-4302; white label cms; wordpress; php object injection; user input; settings vulnerability; high-privilege users; admin
0.001 Low
EPSS
Percentile
36.8%
The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
CNA Affected
[
{
"vendor": "Unknown",
"product": "White Label CMS",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.5"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
openvas
openvas
WordPress White Label CMS Plugin < 2.5 PHP Object Injection Vulnerability
2023-01-03 00:00:00
wpvulndb
wpvulndb
White Label CMS < 2.5 - Admin+ PHP Object Injection
2022-12-08 00:00:00
prion
prion
Design/Logic Flaw
2023-01-02 22:15:00
wpexploit
wpexploit
White Label CMS < 2.5 - Admin+ PHP Object Injection
2022-12-08 00:00:00
nvd
nvd
CVE-2022-4302
2023-01-02 22:15:16
cve
cve
CVE-2022-4302
2023-01-02 22:15:16