WordPress · Revive Old Posts · CVE-2022-4680
**Name of the Vulnerable Software and Affected Versions**
Revive Old Posts WordPress plugin versions prior to 9.0.11
**Description**
The issue allows high privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present, due to the unserialize of user input provided via the settings.
**Recommendations**
For versions prior to 9.0.11, update to version 9.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the settings page to minimize the risk of exploitation.