← CVE Intelligence

CVE-2022-3900

Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection PUBLISHED

Description (CNA)

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / Cooked Proaffected 0 before 1.7.5.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.