PHP Object Injection in Rank Math SEO Schema REST Endpoint

The schema REST handler unserialized metadata that WordPress core had already unserialized, so a stored value whose first-pass result is itself a serialized object payload gets instantiated. An author-level user can therefore trigger PHP object injection and, with a suitable gadget chain, execute arbitrary code. The same release also requires the... Weiterlesen