CVE-2022-2444
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.30%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.30% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-502
- Affected
- themeisle/visualizer
- Source
- security@wordfence.com
References
- https://github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Module/Chart.php#L1115Product
- https://github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Source/Csv.phpProduct
- https://github.com/Codeinwp/visualizer/compare/v3.7.9...v3.7.10Patch
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2752058%40visualizer&new=2752058%40visualizer&sfp_email=&sfph_mail=Patch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d9606d92-8061-4dfc-a6e2-509b54613277?source=cveThird Party Advisory
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2444Third Party Advisory
- https://github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Module/Chart.php#L1115Product
- https://github.com/Codeinwp/visualizer/blob/master/classes/Visualizer/Source/Csv.phpProduct
- https://github.com/Codeinwp/visualizer/compare/v3.7.9...v3.7.10Patch
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2752058%40visualizer&new=2752058%40visualizer&sfp_email=&sfph_mail=Patch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d9606d92-8061-4dfc-a6e2-509b54613277?source=cveThird Party Advisory
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2444Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.