Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3900
HistoryDec 12, 2022 - 6:15 p.m.

Design/Logic Flaw

2022-12-1218:15:00
PRIOn knowledge base
www.prio-n.com
7
cooked pro wordpress
php object injection
vulnerability

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.

CPENameOperatorVersion
cookedlt1.7.5.7

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

Related for PRION:CVE-2022-3900