WordPress Plugin Vulnerabilities
Advanced Custom Fields < 5.7.12 - Unserialize of user input
Description
Multiple maybe_unserialize calls result with unserialize of user input. Low priviledged users as contributors, but in many cases visitors too
Proof of Concept
Affects Plugins
Fixed in 5.7.12 References
Classification
Type
OBJECT INJECTION
OWASP top 10
CWE
Miscellaneous
Original Researcher
Slavco
Submitter
Slavco
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-02-15 (about 7 years ago)
Added
2019-06-17 (about 6 years ago)
Last Updated
2019-11-26 (about 6 years ago)
WPScan 