Vulnerabilities
Sites using Duplicator face remote code execution via object injection flaw
Unauthenticated attackers can trigger command execution in Duplicator plugins through stored content and administrator migration actions.
PHP Object Injection
Everything AppSec Scoop has reported about PHP Object Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations at Risk: Stargaze WordPress Theme Vulnerability Rated Critical 9.8
A critical vulnerability in the Stargaze WordPress theme allows unauthenticated attackers to inject PHP objects, posing a severe risk to organisations running versions up to 1.10.