CVE-2023-4971
Assigner: WPScan
Published: 2023-10-16T19:38:52.844Z
State: PUBLISHED
title: Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection
problemTypes: descriptions: description: CWE-502 Deserialization of Untrusted Data
type: CWE
affected: vendor: Unknown
product: Weaver Xtreme Theme Support
versions: status: affected
versionType: custom
version: 0
lessThan: 6.3.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import  a malicious file and a suitable gadget chain is present on the blog.
credits: value: Do Xuan Trung
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator