VULNERABILITY INTELLIGENCE

CVE-2022-4489

CVSS score7.2 HIGH

EPSS probability1.31%

CISA KEVNot currently listed

Published2023-02-06

Last modified2026-06-17

Description

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.