s2Member WordPress Plugin Object Injection Vulnerability

A deserialization vulnerability allowing object injection has been identified in the s2Member WordPress plugin, specifically in versions through 250701. This vulnerability arises from the improper handling of untrusted data, which could be exploited to manipulate objects within the application.

Impact

Exploitation of this vulnerability could lead to object injection, allowing attackers to manipulate objects and potentially execute arbitrary code, depending on the application's object handling.