{"id":"CVE-2022-4063","aliases":["EUVD-2022-51440","GHSA-5rmh-7p7v-fmfc"],"status":"published","title":"InPost Gallery \u003c 2.1.4.1 - Unauthenticated LFI to RCE","description":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files \u0026 URLs, which may enable them to run code on servers.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.10177,"percentile":0.95695,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2022-12-19T13:41:37Z","modified":"2026-06-17T05:19:52Z","exploits":[{"source":"nuclei","id":"CVE-2022-4063","title":"WordPress InPost Gallery \u003c2.1.4.1 - Local File Inclusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4063.yaml"},{"source":"pocgithub","id":"im-hanzou/INPGer","title":"im-hanzou/INPGer","date":"2023-09-11","url":"https://github.com/im-hanzou/INPGer"}],"products":[{"vendor":"pluginus","product":"inpost_gallery"},{"vendor":"realmag777","product":"inpost gallery"},{"vendor":"unknown","product":"inpost gallery"}],"references":[{"url":"https://wpscan.com/vulnerability/6bb07ec1-f1aa-4f4b-9717-c92f651a90a7","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4063"},{"url":"https://github.com/advisories/GHSA-5rmh-7p7v-fmfc"}],"sources":{"cve":[{"id":"CVE-2022-4063","title":"InPost Gallery \u003c 2.1.4.1 - Unauthenticated LFI to RCE","description":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files \u0026 URLs, which may enable them to run code on servers.","status":"published","published":"2022-12-19T13:41:37.739Z","modified":"2025-04-17T14:01:03.199Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:34:37.932195Z"}],"euvd":[{"id":"EUVD-2022-51440","description":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files \u0026 URLs, which may enable them to run code on servers.","status":"published","published":"2022-12-19T13:41:37Z","modified":"2025-04-17T14:01:03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:22.025137Z"}],"ghsa":[{"id":"GHSA-5rmh-7p7v-fmfc","title":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when...","description":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files \u0026 URLs, which may enable them to run code on servers.","status":"published","published":"2022-12-19T15:30:29Z","modified":"2023-02-01T05:01:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:49:41.640503Z"}],"nvd":[{"id":"CVE-2022-4063","description":"The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files \u0026 URLs, which may enable them to run code on servers.","status":"published","published":"2022-12-19T14:15:12.103Z","modified":"2026-06-17T05:19:52.833Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:34.031641Z"}]}}