CVE-2022-4680

CVE-2022-4680 is a PHP Object Injection vulnerability affecting the Revive Old Posts WordPress plugin prior to version 9.0.11. This flaw allows high-privilege users, such as administrators, to execute arbitrary code if a suitable gadget is present, by unserializing malicious user input from settings. With a CVSS score of 7.2 (HIGH), it poses a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.