The PublishPress Capabilities WordPress plugin prior to 2.5.2, PublishPress Capabilities Pro WordPress plugin prior to 2.5.2 unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
publishpress capabilities |
Vulmon