CVE-2022-3679

CVE-2022-3679: Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection

Vendor Unknown
Product Starter Templates by Kadence WP
Published January 9, 2023
Last update April 9, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Key dates

02Disclosure timeline

January 9, 2023 CVE published
April 9, 2025 Record updated