PT-2026-50085 · WordPress · Avada
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Avada versions prior to 3.15.4
Description
PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the object structure to execute arbitrary code or perform unauthorized actions.
Recommendations
Update to version 3.15.4 or later.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Avada