CyberRota Analysis
AI-GeneratedThe ChamaWP WordPress plugin prior to version 1.0.13 is vulnerable due to inadequate validation of user input, enabling unauthenticated attackers to inject arbitrary PHP objects through a PHP deserialization function. This flaw could result in remote code execution if exploited in conjunction with other installed code that provides a suitable gadget chain. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other installed code.