critical9.8
CVE-2019-15320
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
Impact
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Optiontree Project | Optiontree | before 2.7.3 |