Super Stage WP WordPress Plugin Unauthenticated PHP Object Injection Vulnerability

A PHP Object Injection vulnerability has been identified in the Super Stage WP WordPress plugin, affecting versions through 1.0.1. The vulnerability arises because the plugin unserializes user input from the REQUEST data, which could enable unauthenticated users to exploit the blog if a suitable gadget for object injection is available.

Impact

Exploitation of this vulnerability allows for PHP Object Injection, which could lead to arbitrary code execution or other impacts depending on the injected object and the application's context.

Reproduction

To reproduce this vulnerability, send a request to 'wp-content/plugins/super-stage-wp/Staging/bridge/bridge.php' with a 'data' parameter containing a Base64-encoded serialized payload. The endpoint is publicly accessible and does not require authentication. The plugin will unserialize the data, creating a PHP Object Injection vulnerability.