VULNERABILITY INTELLIGENCE

CVE-2022-3417

CVSS score8.8 HIGH

EPSS probability0.93%

CISA KEVNot currently listed

Published2023-01-09

Last modified2026-06-17

Description

The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import (intentionally or not) a malicious settings file and a suitable gadget chain is present on the blog.