CVE-2022-3335 — Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection

CVE-2022-3335

Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection PUBLISHED

Description (CNA)

The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Affected (CNA)

Vendor / product	Versions
Unknown / Kadence WooCommerce Email Designer	affected 1.5.7 before 1.5.7

CWE

CWE-502

References

https://wpscan.com/vulnerability/39514705-c887-4a02-a77b-36e1dcca8f5d

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/39514705-c887-4a02-a77b-36e1dcca8f5d

CISA-ADP

No English description supplied.

No references supplied.