{"id":"CVE-2022-4680","aliases":["EUVD-2022-52004","GHSA-pqm2-5wmp-22wm"],"status":"published","title":"Revive Old Posts – Social Media Auto Post and Scheduling Plugin \u003c 9.0.11 - PHP Object Injection","description":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01046,"percentile":0.64407,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-502"],"published":"2023-01-30T20:31:43Z","modified":"2026-06-17T05:21:32Z","products":[{"vendor":"codeinwp","product":"revive old posts"},{"vendor":"revive","product":"revive_old_posts"},{"vendor":"unknown","product":"revive old posts"}],"references":[{"url":"https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4680"},{"url":"https://github.com/advisories/GHSA-pqm2-5wmp-22wm"}],"sources":{"cve":[{"id":"CVE-2022-4680","title":"Revive Old Posts – Social Media Auto Post and Scheduling Plugin \u003c 9.0.11 - PHP Object Injection","description":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.","status":"published","published":"2023-01-30T20:31:43.188Z","modified":"2025-03-27T19:45:27.879Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-52004","description":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.","status":"published","published":"2023-01-30T20:31:43Z","modified":"2025-03-27T19:45:27Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:48.662755Z"}],"ghsa":[{"id":"GHSA-pqm2-5wmp-22wm","title":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the...","description":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.","status":"published","published":"2023-01-30T21:30:21Z","modified":"2023-02-14T05:06:32Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:54:07.544087Z"}],"nvd":[{"id":"CVE-2022-4680","description":"The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.","status":"published","published":"2023-01-30T21:15:11.83Z","modified":"2026-06-17T05:21:32.86Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:35.561816Z"}]}}