Vulnerability CVE-2022-3357


Published: 2022-10-31

Description:
The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

Type:

CWE-502

(Deserialization of Untrusted Data)

 References:
https://wpscan.com/vulnerability/2e28a4e7-e7d3-485c-949c-e300e5b66cbd

Copyright 2026, cxsecurity.com

 

Back to Top