Skip to content
Sign in
7.2 High

CVE-2022-3425 The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow…

Description

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected products and versions

Product Affected versions Fixed in
Analyticator 6.5 earliest → < 6.5.6 6.5.6

Other CVEs of Analyticator

The 2 CVEs of Analyticator →
CVE-2022-4323 The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high… 7.2 High
Track this CVE