What’s Vulnerable › Vulnerabilities

CVE-2022-4606: PHP Remote File Inclusion in flatpressblog/flatpress

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 35.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-12-18 · updated 2026-06-17
• Weakness: CWE-98

Description

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.

Affected products

• flatpressblog/flatpress: through 1.2.1

References

• https://github.com/flatpressblog/flatpress/commit/c30d52b28483e1e512d0d81758d4c149f02b4068
• https://huntr.dev/bounties/3dab0466-c35d-4163-b3c7-a8666e2f7d95
• https://github.com/flatpressblog/flatpress/commit/c30d52b28483e1e512d0d81758d4c149f02b4068
• https://huntr.dev/bounties/3dab0466-c35d-4163-b3c7-a8666e2f7d95

Get alerted when CVE-2022-4606 or the next vulnerability affects your stack