Is CVE-2023-3360 being exploited?

No public exploit is currently tracked.

How severe is CVE-2023-3360?

CVE-2023-3360 has a CVSS v3 severity of LOW (3.3).

Back

CVE-2023-3360

Description

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.