PT-2024-38484 · Devvn · The Image Hotspot

Name of the Vulnerable Software and Affected Versions: The Image Hotspot by DevVN plugin for WordPress versions 1.2.5 and earlier Description: The issue concerns PHP Object Injection via deserialization of untrusted input in the devvn ihotspot shortcode func function. This allows authenticated...