Threats tagged 'ghsa-6gfw-3qvp-fj85'

The QA Assistants – Driven by data plugin for WordPress versions up to and including 5.3.0 is vulnerable to PHP Object Injection via the 'dlevent_ver' parameter. This vulnerability arises from unsafe deserialization without class restrictions and insufficient sanitization of path traversal sequences. An unauthenticated attacker can exploit this to perform arbitrary file writes using a gadget in the plugin's dependencies, potentially leading to remote code execution. Exploitation requires triggering a scheduled event that runs automatically every two minutes without authentication.