Description
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Super Stage WP | ≤ 1.0.1 | — |
References
- https://wpscan.com/vulnerability/d6e3041f-62e8-49ba-8806-59a1c07ec43d/ exploit vdb-entry technical-description