WordPress SearchRegex deserialization injection vulnerability

WordPress SearchRegex versions 3.5 and earlier have a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted inputs in the replaceall function. It may allow authenticated attackers with subscription or higher privileges to inject PHP objects and...