high7.2
CVE-2022-4489
The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP …
Impact
The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pluginus | Husky - Products Filter Professional For Woocommerce | before 1.3.2 |