CVE-2017-18604 – SiteBuilder Dynamic Components <= 1.0 - PHP Object Injection

https://notcve.org/view.php?id=CVE-2017-18604

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. El plugin sitebuilder-dynamic-components versiones hasta 1.0 para WordPress, presenta una inyección de objetos PHP por medio de una petición AJAX. • https://wordpress.org/plugins/sitebuilder-dynamic-components/#developers https://wpvulndb.com/vulnerabilities/8829 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-502: Deserialization of Untrusted Data •