CVE-2022-3180
✓ Confirmed 0-Day
Triaged: March 20, 2026
2 articles
EPSS Score
Source: FIRST.org · 2026-05-24
23.52%
probability
This CVE has a 23.52% probability
of being exploited in the next 30 days.
0%
Top 96.0th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Attack Intelligence
Zero-day in WPGateway Wordpress plugin actively exploited in attacks
BleepingComputer
Sep 13, 2022
Signal Intelligence
Confidence
85%
EPSS
23.52%
Mentions
2
Last Seen
Sep 13, 2022
CNA Information
Analyst Note
CVE-2022-3180 is explicitly identified as a zero-day in WPGateway WordPress plugin with active exploitation in the wild documented by authoritative sources (TheHackerNews, BleepingComputer). Both articles explicitly use 'zero-day' terminology and report active attacks. While specific patch timing details are unavailable, the contemporary reporting in 2022 and explicit zero-day designation in multiple sources support confirmed classification.
Triage Info
Decided atMar 20, 2026