WP-Mobile-BankID-Integration <= 1.0.0 - PHP Object Injection
criticalThe WP-Mobile-BankID-Integration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and excluding, 1.0.1 via deserialization of untrusted input through the getAuthResponseFromDB function. This makes it possible for attackers to inject a PHP Object. No known POP chain is present in the vulnera...
- CVSS:
- 9.8
- Affected:
- up to 1.0.1
- Fixed in:
- 1.0.1
- Disclosed:
- Dec 26, 2023