Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gpmw-c588-4p7h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.

EPSS

Процентиль: 80%
0.01341
Низкий

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.

EPSS

Процентиль: 80%
0.01341
Низкий

Дефекты

CWE-74