Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3679

The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Published

2023-01-09T23:15:26.843

Last Modified

2025-04-09T19:15:43.980

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

-

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application kadencewp starter_templates ≤ 1.2.17 Yes
References