CVE-2023-6933

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 1.4.4 . The root cause is the deserialization of untrusted input , allowing unauthenticated attackers to inject a PHP Object. While the plugin itself lacks a POP chain , the vu...