PHP Object Injection Vulnerability in Education Theme for WordPress

CVE-2024-13786

What is CVE-2024-13786?

The Education theme for WordPress is exposed to a PHP Object Injection vulnerability through the deserialization of untrusted input in the 'themerex_callback_view_more_posts' function. This issue affects all versions up to and including 3.6.10, potentially allowing unauthenticated attackers to inject a PHP Object. While there is no present PHP Object Pollution (POP) chain in the theme itself, if any additional plugin or theme containing a POP chain is installed, it could lead to severe consequences, including arbitrary file deletion, sensitive data retrieval, or even remote code execution, depending on the specifics of the exploitation vector.

References