Description
The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Weaver Xtreme Theme Support | < 6.3.1 | 6.3.1 |
References
- https://wpscan.com/vulnerability/421194e1-6c3f-4972-8f3c-de1b9d2bcb13 exploit vdb-entry technical-description