Threats tagged 'ghsa-6wgh-rvcx-89g9'

The Everest Forms (Pro) WordPress plugin versions up to and including 1.9.7 are vulnerable to PHP Object Injection via deserialization of untrusted input in the mime_content_type() function. This vulnerability allows unauthenticated attackers to inject PHP objects if a form with a non-required signature field and an image upload field is present. Exploitation requires the presence of a gadget chain (POP chain) in another installed plugin or theme, as no such chain exists in Everest Forms itself. The vulnerability affects PHP versions prior to 8 and can lead to actions such as arbitrary file deletion, sensitive data retrieval, or code execution depending on the POP chain available.