Description
The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Read More & Accordion | < 3.2.7 | 3.2.7 |
References
- https://wpscan.com/vulnerability/1e733ccf-8026-4831-9863-e505c2aecba6 exploit vdb-entry technical-description