CVE-2023-32242: WordPress Woodmart Core Plugin <= 1.0.36 is…

Record summary

CVE-2023-32242 has a selected CVSS score of 9.8 (critical).

Description

Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects WoodMart - Multipurpose WooCommerce Theme: from n/a through 1.0.36.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV: Listed · May 11, 2023 · VulnCheck
Reported exploitation: Observed · VulnCheck

Affected products and versions

Product	Source	Version range	Status
WoodMart - Multipurpose WooCommerce Theme Browse xTemos / WoodMart - Multipurpose WooCommerce Theme Default status: unaffected	CVE List	Through 1.0.36	affected
Woodmart Core Browse xtemos / Woodmart Core	VulnCheck	Version data not supplied

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-32242

patchstack.comvdb entry

https://patchstack.com/database/vulnerability/woodmart-core/wordpress-woodmart-core-plugin-1-0-36-php-object-injection?_s_id=cve