Lucene search
PRIOn knowledge basePRION:CVE-2022-3679HistoryJan 09, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-01-0923:15:00
PRIOn knowledge base
www.prio-n.com
4
kadence wp
wordpress plugin
php object injection
unserialization
imported files
admin
malicious file execution
The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| starter_templates | le | 1.2.17 |
Related
wpvulndb
wpvulndb
Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection
2022-12-16 00:00:00
openvas
openvas
wpexploit
wpexploit
Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection
2022-12-16 00:00:00
cve
cve
CVE-2022-3679
2023-01-09 23:15:26
cvelist
cvelist
nvd
nvd
CVE-2022-3679
2023-01-09 23:15:26