CVE-2022-4043

high · 7.2

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

7.2

CVSS

17.7%

EPSS (exploit prob.)

97th

EPSS percentile

2023-01-09

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
wp_custom_admin_interface_project	wp_custom_admin_interface	< 7.29

Check a specific version with /api/v1/cve/match.

References

https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc
https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-4043