CVE-2022-3359

CVE-2022-3359: Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection

Vendor Unknown
Product Shortcodes and extra features for Phlox theme
Published December 12, 2022
Last update April 22, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Key dates

02Disclosure timeline

December 12, 2022 CVE published
April 22, 2025 Record updated