Lucene search
PRIOn knowledge basePRION:CVE-2022-3335HistoryOct 25, 2022 - 5:15 p.m.
Design/Logic Flaw
2022-10-2517:15:00
PRIOn knowledge base
www.prio-n.com
7
plugin vulnerability
php object injection
admin import
malicious file
gadget chain
wordpress plugin
The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kadence_woocommerce_email_designer | lt | 1.5.7 |
Related
openvas
openvas
patchstack
patchstack
cve
cve
CVE-2022-3335
2022-10-25 17:15:57
wpexploit
wpexploit
Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
2022-10-03 00:00:00
wpvulndb
wpvulndb
Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
2022-10-03 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-3335
2022-10-25 17:15:57