The sitebuilder-dynamic-components plugin up to and including 1.0 for WordPress has PHP object injection via an AJAX request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sitebuilder dynamic components project sitebuilder dynamic components |