Description (CNA)
The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / ShopLentor | affected 0 before 2.5.4 |
CWE
No CWE identifiers supplied.
References
- https://wpscan.com/vulnerability/1885a708-0e8a-4f4c-8e26-069bebe9a518
- https://plugins.trac.wordpress.org/changeset/2852711/woolentor-addons/trunk/includes/helper-function.php
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.