CVE-2023-0232

PoC —

CVSS 3.1

9.8 critical

EPSS

3%p88

Published

Feb 21, 2023 (Feb 21, 2023)

Modified

Jun 17, 2026

Description

The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

Vendors: hasthemes
Products: shoplentor
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.