AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-4324

HIGH · CVSS 7.2 EPSS 17.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-4324
Severity
HIGH
CVSS
7.2
EPSS
17.69%
WordPress

Original NVD Description

The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog.