CVE-2022-3380

HIGH · CVSS 7.2 EPSS 1.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-3380

Severity

HIGH

CVSS

7.2

EPSS

1.13%

WordPress

Original NVD Description

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.