CVE-2022-45077

WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability

Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress.

We have discovered 60,422 live websites that are affected by CVE-2022-45077.

Test my site



Affected Software

Product  BeTheme
Category Wordpress Themes
Vulnerable Domains60,422 live websites (54.53% of BeTheme install base)
Vulnerable Versions
  • from 0 before 26.5.1.4
Vulnerable Versions Count507 versions ( 83.39% of all versions)



Details

  • Published - Nov 17, 2022
  • Updated - Feb 20, 2025

Credits

  • Vulnerability discovered by Dave Jong (Patchstack)

CVE-2022-45077 usage by Country

United States17,618 websites


Germany7,891 websites
France3,644 websites
Brazil2,642 websites
Italy2,175 websites
Poland2,064 websites
GB1,815 websites
Spain1,716 websites
Russia1,532 websites
Netherlands1,478 websites

CVE-2022-45077 usage by TLD

.com22,643 websites
.de3,691 websites
.com.br3,352 websites
.fr2,471 websites
.it1,859 websites
.org1,737 websites
.pl1,639 websites
.nl1,454 websites
.ru1,232 websites
.co.uk1,177 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2022-45077

Top websites that are affected by CVE-2022-45077. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*********.nl United States*,***
*****************.com United States**,***
******.fr France**,***
**********.com United States**,***
**********.com United States**,***
***********.com Singapore***,***
*******.**.ke Kenya***,***
*******.de Germany***,***
********.at Germany***,***
********.nl Netherlands***,***
See full domain list

FAQ

A total of 60,422 websites have been identified as vulnerable to CVE-2022-45077, discovered through global website indexing conducted by WebTechSurvey.
BeTheme is susceptible to CVE-2022-45077 vulnerability.
BeTheme versions before 26.5.1.4 are vulnerable to CVE-2022-45077.
Version 26.5.1.4 of BeTheme addresses the CVE-2022-45077 security vulnerability.