Critical severity9.8NVD Advisory· Published Jan 16, 2023· Updated Jun 17, 2026

CVE-2022-4060

Description

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Odude/User Post Gallery
cpe:2.3:a:odude:user_post_gallery:*:*:*:*:*:wordpress:*:*
Range: <=2.19
WordPress/Gallery Plugincpe-rescue
Package: https://wordpress.org/plugins/gallery-plugin
WordPress/User Post Galleryllm-fuzzy
Range: <=2.19

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/8f982ebd-6fc5-452d-8280-42e027d01b1envdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.034
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000