Threats tagged 'ghsa-jc25-ggg4-hhvw'

The User Frontend plugin for WordPress, up to and including version 4.3.1, suffers from a deserialization of untrusted data vulnerability. This flaw arises from insufficient input validation on the wpuf_files parameter during form submission and the use of unconditional deserialization via maybe_unserialize() when displaying post content. Authenticated users with Subscriber-level access or higher can exploit this to inject arbitrary PHP objects, potentially leading to arbitrary code execution, file deletion, or other malicious actions if a suitable POP chain exists.