Stylemix uListing WordPress Plugin PHP Object Injection Vulnerability

A PHP object injection vulnerability has been identified in the Stylemix uListing WordPress plugin, affecting versions through 2.2.0. This vulnerability arises from the deserialization of untrusted data, allowing for object injection that could be exploited if a suitable object injection chain is available.

Impact

Exploitation of this vulnerability could lead to PHP object injection, allowing a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more, provided a proper object injection chain is present.