WordPress Plugin Vulnerabilities
Category Order and Taxonomy Terms Order < 1.5.3 - Authenticated PHP Object Injection
Description
Usage of unserialize() on user input in the saving request of the orders leads to PHP object injection vulnerability.
Proof of Concept
Affects Plugins
Fixed in 1.5.3 References
Classification
Type
OBJECT INJECTION
OWASP top 10
CWE
Miscellaneous
Submitter
Karim El Ouerghemmi
Submitter website
Verified
No
WPVDB ID
Timeline
Publicly Published
2018-02-28 (about 8 years ago)
Added
2018-03-02 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)
WPScan 