Skip to content
Sign in
7.2 High

CVE-2022-4302 The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow…

Description

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected products and versions

Product Affected versions Fixed in
White Label CMS 2.5 earliest → < 2.5 2.5

Other CVEs of White Label CMS

The 2 CVEs of White Label CMS →
CVE-2022-0422 The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter… Not rated
Track this CVE