Unauthenticated PHP Object Injection in Forminator Forms Entry Form UID

Forminator stored the visitor-supplied form_uid value of abandoned (save-and-continue) submissions unserialized in the entry meta table and later passed it to maybe_unserialize() when loading the entry. An unauthenticated attacker can submit a crafted serialized PHP object as form_uid, leading to PHP Object Injection and, if a suitable POP chain... Weiterlesen: Unauthenticated PHP Object Injection in Forminator Forms Entry Form UID