ShapedPlugin WP Tabs PHP Object Injection Vulnerability

A deserialization vulnerability allowing object injection has been identified in the WP Tabs plugin by ShapedPlugin LLC, affecting versions through 2.2.11. This vulnerability arises from the deserialization of untrusted data, which could potentially be exploited to inject objects into the application.

Impact

Exploitation of this vulnerability could lead to PHP object injection, allowing for various attacks such as code execution, SQL injection, path traversal, or denial-of-service, depending on the presence of a suitable PHP object injection chain.