WordPress PIMP - Creative MultiPurpose Theme Deserialization of Untrusted Data Vulnerability

A deserialization of untrusted data vulnerability has been identified in the WordPress PIMP - Creative MultiPurpose theme, affecting versions through 1.7. This vulnerability allows object injection, which could be exploited to manipulate website logic, cause a denial of service, or execute arbitrary code. There is no official fix available for this issue.

Impact

Exploitation of this vulnerability could lead to object injection, allowing for manipulation of website logic, causing a denial of service, or executing arbitrary code. A malicious actor could potentially execute commands to gain access to the admin panel.

Remediation

Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix becomes available. This virtual patch can be activated through the Patchstack service.