CVE-2023-0232

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Feb 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-02335.4The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a pa CVE-2023-02348.8The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an a CVE-2023-02366.1The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back i CVE-2023-02385.5Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a maliciou CVE-2023-02407.8There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalat CVE-2023-02416.5pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or CVE-2023-02428.8Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any comm CVE-2023-02439.8A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\Ar CVE-2023-02449.8A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Co CVE-2023-02459.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affe CVE-2023-02465.4A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the compo CVE-2023-02477.8Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.