CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress. Its EPSS score suggests a 42.7% probability of exploitation in the next 30 days.
CVE
CVE-2022-4060
Severity
CRITICAL
CVSS
9.8
EPSS
42.72%
WordPress
Original NVD Description
The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.
Related CVEs
Other vulnerabilities affecting the same vendor(s)