CVE-2022-3490

Katalog CVE

CVSS 7.2 · High EPSS 1,2%

Kerentanan pada themehigh checkout field editor for woocommerce. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

Rincian

Terbit di NVD

28 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136 exploit · advisory pihak ketiga