Everything RedTeam Monitor has reported about PHP Object Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
Attackers can inject malicious objects into the LearnPress plugin via checkout parameters, gaining critical access to WordPress sites without logging in.
The National Vulnerability Database rates a PHP object injection bug in Kalles CMS as critical, affecting all versions through 1.1.7.1.
The Equadio WordPress theme contains a severe vulnerability allowing remote code execution without authentication, posing immediate risks to users.