CVE-2022-3380
Assigner: WPScan
Published: 2022-10-31T00:00:00
State: PUBLISHED
title: Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection
descriptions: value: The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
affected: vendor: Unknown
product: Customizer Export/Import
versions: version: 0.9.5
status: affected
lessThan: 0.9.5
versionType: custom
credits: value: Nguyen Duy Quoc Khanh
problemTypes: descriptions: type: CWE
description: CWE-502 Deserialization of Untrusted Data
cweId: CWE-502
x_generator: WPScan CVE Generator
source: discovery: EXTERNAL