Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

What to know

What it is

A Subscriber PHP Object Injection vulnerability exists in News Kit Elementor Addons versions up to 1.5.0, allowing an attacker to potentially inject malicious PHP code. This could lead to code execution, data tampering, and other severe consequences.

Affected

{'products': ['News Kit Elementor Addons'], 'packages': [], 'versions': ['<= 1.5.0']}

Fix

Upgrade to a version greater than 1.5.0

Exploitation

No known exploitation