Beveiligingsadvies

CVE-2022-4324

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-02 21:49:28

Laatst bijgewerkt 2025-04-10 18:50:11

Toegewezen door WPScan

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog.

← Alle CVE's bekijken Bekijk op cve.org ↗