Lucene search
PRIOn knowledge basePRION:CVE-2022-4120HistoryDec 26, 2022 - 1:15 p.m.
Code injection
2022-12-2613:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
plugin vulnerability
base64 encoding
unserialize function
captcha bypass
gadget chain
nvd
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize() PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain
| CPE | Name | Operator | Version |
|---|---|---|---|
| stop_spammers | lt | 2022.6 |
Related
nvd
nvd
CVE-2022-4120
2022-12-26 13:15:12
cvelist
cvelist
wpvulndb
wpvulndb
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
2022-12-05 00:00:00
cve
cve
CVE-2022-4120
2022-12-26 13:15:12
wpexploit
wpexploit
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
2022-12-05 00:00:00