← CVE Intelligence

CVE-2022-3490

Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection PUBLISHED

Description (CNA)

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

Affected (CNA)

Vendor / productVersions
Unknown / Checkout Field Editor (Checkout Manager) for WooCommerceaffected 0 before 1.8.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.