CVE-2022-4489 — WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection

CVE-2022-4489

WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection PUBLISHED

Description (CNA)

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected (CNA)

Vendor / product	Versions
Unknown / HUSKY	affected 0 before 1.3.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/067573f2-b1e6-49a9-8c5b-f91e3b9d722f

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/067573f2-b1e6-49a9-8c5b-f91e3b9d722f

CISA-ADP

No English description supplied.

No references supplied.