CVE-2022-2439

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated administrative users to call files using a PHAR wrapper, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Sep 24, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-243908.8Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis CVE-2022-243918.8Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level ac CVE-2022-243928.8Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed CVE-2022-243938.8Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “chec CVE-2022-243948.8Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “upda CVE-2022-243956.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, re CVE-2022-243967.8The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be a CVE-2022-243976.1SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflect CVE-2022-243986.5Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access CVE-2022-243996.1The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using CVE-2022-24407.2The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to CVE-2022-244005.9A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.