TableOn WordPress Plugin PHP Object Injection Vulnerability

A PHP object injection vulnerability has been identified in the TableOn WordPress Posts Table Filterable plugin, affecting versions through 1.0.2. This vulnerability allows for object injection via deserialization of untrusted data.

Impact

Exploitation of this vulnerability could lead to PHP object injection, allowing for code execution, SQL injection, path traversal, denial of service, and more, if a suitable payload chain is available.

Remediation

Users are advised to update to a version of the TableOn WordPress Posts Table Filterable plugin that is not vulnerable to this issue. Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.