Lucene search
PRIOn knowledge basePRION:CVE-2022-3417HistoryJan 09, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-01-0923:15:00
PRIOn knowledge base
www.prio-n.com
2
wptouch
wordpress
plugin
php object injection
unserializing
imported settings
vulnerability
The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import (intentionally or not) a malicious settings file and a suitable gadget chain is present on the blog.
Related
cve
cve
CVE-2022-3417
2023-01-09 23:15:26
cvelist
cvelist
CVE-2022-3417 WPtouch < 4.3.45 - Admin+ PHP Object Injection
2023-01-09 22:13:31
nvd
nvd
CVE-2022-3417
2023-01-09 23:15:26
openvas
openvas
WordPress WPtouch Plugin < 4.3.45 Multiple Vulnerabilities
2023-04-20 00:00:00