CVE-2022-3490: Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3490?
CVE-2022-3490 is a vulnerability that affects the Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before version 1.8.0.
What is the severity of CVE-2022-3490?
The severity of CVE-2022-3490 is high, with a severity value of 7.2.
How does CVE-2022-3490 affect the Checkout Field Editor for WooCommerce plugin?
CVE-2022-3490 allows high privilege users, such as admin, to perform PHP Object Injection when a suitable gadget is present.
Is there a fix available for CVE-2022-3490?
Yes, updating the Checkout Field Editor for WooCommerce plugin to version 1.8.0 or later fixes the vulnerability.
Where can I find more information about CVE-2022-3490?
You can find more information about CVE-2022-3490 at the following reference: [link](https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136). Please note that it is important to verify the credibility of external sources.