Rencontre – Dating Site < 3.11.2 - Subscriber+ PHP Object Injection

2024-01-0500:00:00

wpscan.com

plugin unserialization authenticated users subscribers blog

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

20.5%

JSON

Description The plugin unserializes user input, which could allow any authenticated users, such as subscribers to perform PHP Object Injection when a suitable gadget is present on the blog

References

patchstack.com/database/vulnerability/rencontre/wordpress-rencontre-plugin-3-11-1-authenticated-php-object-injection-vulnerability