Giuliopanda ADFO WordPress Plugin Deserialization Vulnerability Allowing Object Injection

A deserialization vulnerability allowing object injection has been identified in the Giuliopanda ADFO WordPress plugin, affecting versions through 1.9.1. This vulnerability arises from the deserialization of untrusted data, which could be exploited to manipulate object handling within the application.

Impact

Exploitation of this vulnerability could lead to object injection, allowing attackers to manipulate objects in a way that could disrupt application logic, cause a denial-of-service, or potentially execute arbitrary code. In this case, it could allow commands to be executed to gain access to the admin panel.