WordPress Plugin Vulnerabilities
Invite Anyone <= 1.3.18 - Unauthenticated PHP Object Injection
Description
The plugin invite-anyone insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector.
Proof of Concept
Affects Plugins
Fixed in 1.3.19 References
Classification
Type
OBJECT INJECTION
OWASP top 10
CWE
Miscellaneous
Submitter
Robert R
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2017-10-12 (about 8 years ago)
Added
2017-10-13 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)
WPScan 