VDB
CVE-2022-4323
CVE-2022-4323
PUBLISHED
CVSS 7.199999809265137 HIGH
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
EPSS 1.05% · 62.6th percentile
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.05%
62.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sumo | google_analyticator | 0 |
| Unknown | Analyticator | 0 |
Timeline
- Jan 23, 2023 CVE Published
- Jan 24, 2023 EPSS Score
- Mar 6, 2023 EPSS Score
- Apr 16, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 6, 2023 EPSS Score
- Aug 16, 2023 EPSS Score
- Nov 6, 2023 EPSS Score
- Dec 17, 2023 EPSS Score
- Jan 26, 2024 EPSS Score
- Mar 7, 2024 EPSS Score
- May 28, 2024 EPSS Score