CVE-2022-3490 Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection

2022-11-2813:47:16

WPScan

www.cve.org

woocommerce

checkout manager

php object injection

admin

cve-2022-3490

EPSS

0.001

Percentile

43.0%

JSON

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Checkout Field Editor (Checkout Manager) for WooCommerce",
    "collectionURL": "https://wordpress.org/plugins",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.8.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136

EPSS

0.001

Percentile

43.0%

JSON

Related for CVELIST:CVE-2022-3490