Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3425
HistoryJan 23, 2023 - 3:15 p.m.

Design/Logic Flaw

2023-01-2315:15:00
PRIOn knowledge base
www.prio-n.com
2
analyticator wordpress plugin
object injection
unserialized input
high-privilege users
admin
php

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CPENameOperatorVersion
google_analyticatorlt6.5.6

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

Related for PRION:CVE-2022-3425