vulnerability
WordPress Plugin: simple-podcasting: CVE-2022-46175: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:H/Au:S/C:C/I:P/A:C) | Dec 23, 2022 | May 15, 2025 | May 15, 2025 |
Severity
7
CVSS
(AV:N/AC:H/Au:S/C:C/I:P/A:C)
Published
Dec 23, 2022
Added
May 15, 2025
Modified
May 15, 2025
Description
The package json5 before 1.0.2 and between 2.0.0 and 2.2.1 inclusive is vulnerable to prototype pollution due to failure to restrict parsing of keys named `__proto__`. As this package is used in some WordPress plugins, this could result in the impacted plugins being vulnerable.
Solution
simple-podcasting-plugin-cve-2022-46175
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.