High severity8.8NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026
CVE-2022-3359
CVE-2022-3359
Description
The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:averta:shortcodes_and_extra_features_for_phlox_theme:*:*:*:*:*:wordpress:*:*Range: <2.10.7
- WordPress/Shortcodes and extra features for Phlox themedescription
- Range: <2.10.7
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/08f3ce22-94a0-496a-aaf9-d35b6b0f5bb6nvdThird Party Advisory
News mentions
0No linked articles in our index yet.