Vulnerability Details CVE-2022-3900
The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.273
EPSS Ranking 96.2%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-3900
-
cpe:2.3:a:boxystudio:cooked:-
-
cpe:2.3:a:boxystudio:cooked:1.7.5.6