PHP Object Injection Vulnerability in Play.ht Plugin for WordPress by Play.ht

CVE-2024-1772

Summary

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is susceptible to PHP Object Injection due to the deserialization of untrusted input from the play_podcast_data post meta. Authenticated attackers with contributor-level access or higher can exploit this vulnerability to inject a PHP Object. While no known Property-Oriented Programming (POP) chain is evident within the vulnerable plugin, if a POP chain exists through an additional plugin or theme installed on the WordPress site, the risk escalates. Attackers may potentially delete arbitrary files, extract sensitive information, or execute malicious code, compromising the integrity and safety of the WordPress environment.

References