CVE-2022-4323

CVE-2022-4323 is a PHP Object Injection vulnerability affecting the Analyticator WordPress plugin prior to version 6.5.6. This flaw allows high-privilege users, such as administrators, to execute arbitrary code by unserializing malicious user input if a suitable gadget is present. The vulnerability carries a CVSS v3.1 score of 7.2 (High), indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on confidentiality, integrity, and availability. Its EPSS score is low, suggesting a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also absent, suggesting low public awareness and attention.