The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-05-08T13:58:12.709Z
Updated: 2024-08-02T05:57:24.678Z
Reserved: 2023-03-27T09:16:48.102Z
Link: CVE-2023-1650
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-05-08T14:15:12.747
Modified: 2024-11-21T07:39:37.667
Link: CVE-2023-1650
Redhat
No data.