MetaSlider Responsive Slider PHP Object Injection Vulnerability

A deserialization vulnerability allowing object injection has been identified in the MetaSlider Responsive Slider plugin, affecting versions through 3.94.0. This vulnerability could lead to PHP object injection, with potential for further exploitation if a suitable property-oriented programming chain is available.

Impact

Exploitation of this vulnerability could allow for PHP object injection, with risks of code execution, SQL injection, path traversal, denial of service, and more, depending on the presence of a proper property-oriented programming chain.

Remediation

Users of the MetaSlider Responsive Slider plugin should update to version 3.95.0 or later. Patchstack users can enable auto-update for vulnerable plugins.