Lucene search
PRIOn knowledge basePRION:CVE-2022-3490HistoryNov 28, 2022 - 2:15 p.m.
Design/Logic Flaw
2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
2
design/logic flaw
woocommerce
wordpress
php object injection
high privilege users
0.001 Low
EPSS
Percentile
43.1%
The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
| CPE | Name | Operator | Version |
|---|---|---|---|
| checkout_field_editor_for_woocommerce | lt | 1.8.0 |
Related
openvas
openvas
wpvulndb
wpvulndb
Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
2022-11-07 00:00:00
cnvd
cnvd
cvelist
cvelist
nvd
nvd
CVE-2022-3490
2022-11-28 14:15:12
cve
cve
CVE-2022-3490
2022-11-28 14:15:12
patchstack
patchstack
wpexploit
wpexploit
Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
2022-11-07 00:00:00