bdthemes Ultimate Store Kit Elementor Addons Deserialization of Untrusted Data Vulnerability

A deserialization of untrusted data vulnerability has been identified in bdthemes Ultimate Store Kit Elementor Addons, affecting versions through 2.4.0. This vulnerability allows object injection, which could be exploited to manipulate the application's logic, cause a denial-of-service, or execute arbitrary code. In some cases, it may even allow unauthorized access to the admin panel.

Impact

Exploitation of this vulnerability could lead to object injection, allowing for manipulation of application logic, denial-of-service conditions, or execution of arbitrary code. Such code execution could potentially be used to gain access to the admin panel.

Remediation

Users are advised to update to version 2.4.1 or later. Patchstack users can enable auto-update for vulnerable plugins.