WP Activity Log Unauthenticated PHP Object Injection Vulnerability

A vulnerability in the WP Activity Log plugin, specifically in version 5.3.2, allows for PHP object injection due to unvalidated user input being directly passed to an unserialize function. This issue is located in the file 'myapp/classes/Writers/class-csv-writer.php'.

Impact

Exploitation of this vulnerability could lead to PHP object injection, allowing attackers to manipulate object properties and potentially execute arbitrary code, depending on the context of the injected object.