Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-4324

The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.133
EPSS Ranking 93.9%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2022-4324


Contact Us

Shodan ® - All rights reserved