CVE-2022-4043

Published: Jan 9, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected (1)

Products: Wp Custom Admin Interface Project: Wp Custom Admin Interface

Wp Custom Admin Interface Project

1 product

Wp Custom Admin Interface

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wp Custom Admin Interface Project Wp Custom Admin Interface	Before 7.29

References (2)

https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.