WordPress Flickr Shortcode Importer PHP Object Injection Vulnerability

A deserialization vulnerability allowing object injection has been identified in the WordPress Flickr Shortcode Importer plugin, affecting versions through 2.2.3. This vulnerability arises from the improper handling of untrusted data, which could potentially be exploited to inject malicious objects.

Impact

Exploitation of this vulnerability could lead to PHP object injection, allowing for various types of code injection, such as SQL injection, path traversal, or denial-of-service, especially if a suitable PHP object injection chain is available.