WordPress Plugin Betheme them plugin deserialization vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress theme is a theme for WordPress. WordPress Plugin Betheme them plugin 26.5.1.4 and earlier versions contain a deserialization vulnerability that stems from the mfn_builder_import, mfn_builder_ import_page, importdata, importsinglepage, and importfromclipboard functions deserialize untrusted input passed by the import, mfn-items-import-page, and mfn-items-import parameters, which could be used by an attacker to exploit the vulnerability to execute code, retrieve sensitive data, delete files, and more.