WordPress NHR Options Table Manager Object Injection Vulnerability via Deserialization

A deserialization vulnerability allowing object injection has been identified in the NHR Options Table Manager plugin for WordPress, affecting versions through 1.1.2. This vulnerability arises from the improper handling of untrusted data during the deserialization process.

Impact

Exploitation of this vulnerability could lead to object injection, which may be used to manipulate the application's logic, cause a denial-of-service, or execute arbitrary code. In this case, it could potentially allow a malicious actor to execute commands to access the admin panel.

Remediation

Users of the NHR Options Table Manager plugin should update to version 1.1.3 or later to address this vulnerability.