EUVD-2022-34705

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Visualizer plugin for WordPress vulnerable to deserialization via 'remote_data' parameter up to version 3.7.9

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-2444	18 Jul 202217:15	–	attackerkb
Circl	CVE-2022-2444	18 Jul 202220:39	–	circl
CNNVD	WordPress plugin Visualizer 代码问题漏洞	18 Jul 202200:00	–	cnnvd
CVE	CVE-2022-2444	18 Jul 202216:13	–	cve
Cvelist	CVE-2022-2444 Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization	18 Jul 202216:13	–	cvelist
NVD	CVE-2022-2444	18 Jul 202217:15	–	nvd
OSV	CVE-2022-2444	18 Jul 202217:15	–	osv
Prion	Deserialization of untrusted data	18 Jul 202217:15	–	prion
Positive Technologies	PT-2022-16697 · WordPress · The Visualizer: Tables/Charts Manager For Wordpress	18 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2444	5 Feb 202521:17	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "d2b04709-0a77-3369-81b5-17de1353de17",
        "vendor": {
          "name": "themeisle"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7adb6164-699a-33b0-a175-68e48d8d3e03",
        "product": {
          "name": "Visualizer: Tables and Charts Manager for WordPress"
        },
        "product_version": "* ≤3.7.9"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d9606d92-8061-4dfc-a6e2-509b54613277
github	www.github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Source/Csv.php
github	www.github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Module/Chart.php
github	www.github.com/Codeinwp/visualizer/compare/v3.7.9...v3.7.10
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/vulnerability-advisories/

03 Oct 2025 20:07Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.8

EPSS0.02651

SSVC