Ultimate Product Catalog Plugin for WordPress < 4.2.26 PHP Object Injection

According to its self-reported version, the Ultimate Product Catalog Plugin for WordPress running on the remote web server is prior to 4.2.26. It is, therefore, affected by a PHP object injection vulnerability. An unauthenticated, remote attacker can exploit this to inject PHP objects and execute...