Threats tagged 'ghsa-57rw-qx68-p67c'

The Enable Media Replace WordPress plugin versions before 4.2.3 contain a vulnerability where deserialization of stored metadata does not restrict allowed classes. This flaw allows unauthenticated attackers to inject PHP objects that are instantiated during media replacement by users with upload access, leading to PHP Object Injection and local file inclusion. The vulnerability can escalate to remote code execution if an attacker-controlled PHP or HTML file exists on the server. This issue is a regression of CVE-2023-4643, which was fixed in version 4.1.3 but reintroduced in 4.1.4.