Description
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data.
References
- JVNDB-2016-000115 third-party-advisory
- http://www.welcart.com/community/archives/78977
- JVN#47363774 third-party-advisory