FLAP - Business WordPress Theme <= 1.5 - Unauthenticated PHP Object Injection
criticalThe FLAP - Business WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5 via deserialization of untrusted input [from the vulnerable parameter?|in the vulnerable function?]. This makes it possible for unauthenticated attackers to inject a PHP Object. No known P...
- CVSS:
- 9.8
- Affected:
- up to 1.5
- Fix:
- No patched version reported
- Disclosed:
- Jun 3, 2025