CVE-2022-4680

Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 9.0.11 - PHP Object Injection

The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected

Revive Old Posts

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.05% chance of exploitation in the next 30 days, 64th percentile

Published

2023-01-30

Updated

2025-03-27

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af

References

• CVE Record
• NVD entry