ConvertPlug Plugin Vulnerable to PHP Object Injection

CVE-2024-3240

Summary

The ConvertPlug plugin for WordPress, including all versions up to and including 3.5.25, is subject to a PHP Object Injection vulnerability. This issue arises from the deserialization of untrusted input originating from the 'settings_encoded' attribute of the 'smile_info_bar' shortcode. Authenticated attackers, possessing contributor-level access or higher, could exploit this vulnerability to inject PHP objects. In scenarios where a potentially dangerous PHP Object Pollution (POP) chain is present through other plugins or themes on the system, this could facilitate various malicious activities, including the deletion of arbitrary files, retrieval of sensitive data, or unauthorized code execution.

References