3 matches found
CVE-2022-3417 WPtouch < 4.3.45 - Admin+ PHP Object Injection
The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import intentionally or not a malicious settings file and a suitable gadget chain is present on the blog...
8.9AI score0.00922EPSS
SaveExploits1References1
CVE-2022-3417
The CVE-2022-3417 entry concerns the WPtouch WordPress plugin,
8.8CVSS8.8AI score0.00922EPSS
SaveExploits1References1Affected Software1
CVE-2022-3417 WPtouch < 4.3.45 - Admin+ PHP Object Injection
The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import intentionally or not a malicious settings file and a suitable gadget chain is present on the blog...
8.8AI score0.00922EPSS
SaveExploits1References1
20