CVE-2022-3359
Assigner: WPScan
Published: 2022-12-12T17:54:32.235Z
State: PUBLISHED
title: Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
problemTypes: descriptions: description: CWE-502 Deserialization of Untrusted Data
type: CWE
affected: vendor: Unknown
product: Shortcodes and extra features for Phlox theme
versions: status: affected
versionType: custom
version: 0
lessThan: 2.10.7
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
credits: value: Nguyen Duy Quoc Khanh
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator