CVE-2022-2446
High
Description
The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to call files using a PHAR wrapper that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
SeverityHigh
CVSS7.2
Exploit probability—
ProductBenjaminrojas Wp Editor
PublishedSep 13, 2024
First seenSep 13, 2024
Weakness typeCWE-502Deserialization of untrusted data
How to fix
Update
- benjaminrojas wp_editor1.2.9.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| benjaminrojas wp_editor | v < 1.2.9.1 | 1.2.9.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.