critical9.8
CVE-2019-15321
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
Impact
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Optiontree Project | Optiontree | before 2.7.3 |