Deserialization of untrusted data

The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'clipath' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site administrator into...

PT-2023-13445

Name of the Vulnerable Software and Affected Versions ImageMagick Engine plugin for WordPress versions up to, and including 1.7.5 Description The issue allows deserialization of untrusted input via the cli path parameter. This enables unauthenticated users to call files using a PHAR wrapper if th...

CVE-2022-3568: Deserialization of Untrusted Data

The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'clipath' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site administrator into...