← Database

CVE-2022-3425

HIGH CVSS: 7.2 Published: 2023-01-23 Modified: 2026-06-17

Description

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected Platforms

Sumo Google Analyticator

Weakness Type

Unknown

References