ThemeeditorTheme Editor*
2 matches found
CVE-2022-2440
CVE-2022-2440 affects the WordPress Theme Editor plugin up to version 2.8 and enables deserialization of untrusted input via the images_array parameter. The flaw allows authenticated administrators to upload a serialized payload that, when wrapped in PHAR, is deserialized and can call arbitrary P...
7.2CVSS7.1AI score0.0074EPSS
Save