Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.

What to know

What it is

A high-severity vulnerability (CVSS 8.8) exists in WP Media folders versions <= 1.1.10 due to Contributor PHP Object Injection. An attacker could exploit this to gain high privileges, perform arbitrary code execution, and achieve arbitrary access.

Affected

{'products': ['WP Media folders'], 'packages': [], 'versions': ['<= 1.1.10']}

Fix

Check the linked advisory for a fix, as none is provided.

Exploitation

No known exploitation