https://db.gcve.eu/sightings/feed 2026-05-31T22:38:52.275238+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/94c61e4f-6ff2-4573-8f78-65c457b65dfb/export 2026-05-31T22:38:52.640242+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "94c61e4f-6ff2-4573-8f78-65c457b65dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3568", "type": "seen", "source": "https://t.me/cibsecurity/57906", "content": "\u203c CVE-2022-3568 \u203c\n\nThe ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site administrator into performing an action such as clicking on a link, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-10T16:57:50.000000Z"} 2023-02-10T16:57:50+00:00