by Kastro
Paper/Archive/CVE-2026-122662

CVE-2026-122662

Barn2 Plugins Document Library Pro — WordPress Document Library Pro plugin < 4.2.2 - PHP Object Injection vulnerability

CVSS 9.8
critical.is priorityof 100
29
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Deserialization of Untrusted Data vulnerability in Barn2 Plugins Document Library Pro document-library-pro allows Object Injection.This issue affects Document Library Pro: from n/a before 4.2.2.

Affected

ProductAffectedFixed inSource
Document Library Pro< 4.2.24.2.2CNA

Scores by source

Patchstack (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refpatchstack.com/database/wordpress/plugin/document-library-pro/vulnerability/wordpress-document-library-pro-plugin-4-2-2-php-object-injection-vulnerability?_s_id=cve