CVE-2023-4971

Name of the Vulnerable Software and Affected Versions Weaver Xtreme Theme Support WordPress plugin versions prior to 6.3.1

Description The issue arises from the unserialization of the content of an imported file, potentially leading to PHP object injections when a high-privilege user imports a malicious file and a suitable gadget chain is present on the blog.

Recommendations For versions prior to 6.3.1, update to version 6.3.1 or later to resolve the issue. As a temporary workaround, consider restricting file import capabilities to low-privilege users or disabling the file import feature until the update is applied.