PT-2024-23854

Name of the Vulnerable Software and Affected Versions WordPress versions 6.4.0 through 6.4.1 Description The issue allows for code execution via the destruct magic method of the WP HTML Token class when unserializing its instances. This issue was fixed in WordPress 6.4.2 on December 6th, 2023...