Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.

What to know

What it is

A PHP Object Injection vulnerability exists in the Extra Fees Plugin for WooCommerce versions up to 4.4.0, allowing an attacker to inject PHP objects. An attacker could exploit this to gain high privileges, read, write, or modify sensitive data, or disrupt the system.

Affected

{'products': ['Extra Fees Plugin for WooCommerce'], 'packages': [], 'versions': ['<= 4.4.0']}

Fix

Upgrade to a version greater than 4.4.0

Exploitation

No known exploitation