Vulnerability of PHP Object Injection | ww.wp.xz.cn

Resolved Vishwa
(@sbvi1122)

1 year, 1 month ago

Hi,

Would you be addressing this issue?

https://patchstack.com/database/wordpress/plugin/accordions/vulnerability/wordpress-accordion-plugin-2-3-10-php-object-injection-vulnerability?_a_id=473

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Support hasanrang05
(@hasanrang05)

1 year, 1 month ago

We would love to solve the issue, but i could not see much information about vulnerability. where can we find it?
Thread Starter Vishwa
(@sbvi1122)

1 year, 1 month ago
The vulnerability is on PHP Object Injection..

So.. looked around for a bit, and I’m not 100% sure, but this could be it.
```
File: 
accordions/classes/AccordionOptions.php

Code: 
$accordions = maybe_unserialize( get_option( $this->option_name ) );
```
wbmansell
(@wbmansell)

1 year, 1 month ago

We’d also like to see a fix for this… fairly soon as it’s been almost a month (April 9, 2025) since Patchstack reported it.

https://patchstack.com/database/wordpress/plugin/accordions/vulnerability/wordpress-accordion-plugin-2-3-10-php-object-injection-vulnerability?_a_id=431

Otherwise we’ll be forced to remove this plugin and use another.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Vulnerability of PHP Object Injection’ is closed to new replies.

Tags

php

6 replies
3 participants
Last reply from: wbmansell
Last activity: 1 year, 1 month ago
Status: resolved