nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-49777 CVE-2023-49777
CRITICAL
WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
Record summary
CVE-2023-49777 has a selected CVSS score of 9.1 (critical).
Description
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
YITH WooCommerce Product Add-OnsBrowse YITH / YITH WooCommerce Product Add-OnsDefault status: unaffected | CVE List | Through 4.3.0 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/yith-woocommerce-product-add-ons/wordpress-yith-woocommerce-product-add-ons-extra-options-plugin-4-3-0-php-object-injection-vulnerability?_s_id=cve