CVE-2022-2444 Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Authenticated contributors can achieve arbitrary code execution via PHAR deserialization in the Visualizer WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-2444?
CVE-2022-2444 is a high-severity unsafe deserialization vulnerability in themeisle Visualizer: Tables and Charts Manager for WordPress, published on 18 Jul 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
Weakness: CWE-502
Which versions are affected by CVE-2022-2444?
It affects 1 product.
Products include Themeisle Visualizer.
How do I fix CVE-2022-2444?
No fix has been published for CVE-2022-2444 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2022-2444 being exploited?
There is no known exploitation of CVE-2022-2444 in the wild and no public exploit code.
Other vulnerabilities in themeisle Visualizer: Tables and Charts Manager for WordPress
- CVE-2019-16932 Server-side request forgery in n/a
- CVE-2024-35736 WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability
- CVE-2024-27958 WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-23708 WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46848 WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)
Sources
Also known as GHSA-4rjr-p7j3-f64g.