Skip to content
Threat Feed
Subscribe

Product

ARForms

1 brief RSS
high advisory

PHP Object Injection in ARForms Plugin for WordPress

The ARForms WordPress plugin (up to v1.8.5) is vulnerable to unauthenticated PHP Object Injection, which may lead to remote code execution when combined with a POP chain in other installed software.

ARForms wordpress plugin-vulnerability php deserialization
1t 1c