Skip to content
Threat Feed
Subscribe

Product

Live Composer – Free WordPress Website Builder (<= 2.1.18)

1 brief RSS
high advisory

PHP Object Injection in Live Composer WordPress Plugin

The Live Composer plugin for WordPress (<= 2.1.18) contains a PHP object injection vulnerability that allows authenticated contributors to achieve remote code execution if a compatible POP chain exists in the environment.

Live Composer – Free WordPress Website Builder
2t 1c