High severity7.2NVD Advisory· Published Nov 28, 2022· Updated Jun 17, 2026

CVE-2022-3490

Description

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Themehigh/Checkout Field Editor For Woocommerce
cpe:2.3:a:themehigh:checkout_field_editor_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <1.8.0
WordPress/Woocommerce Checkout Managercpe-rescue
Package: https://wordpress.org/plugins/woocommerce-checkout-manager
WordPress/WooCommerce Checkout Field Editor (Checkout Manager)llm-fuzzy
Range: <1.8.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000