Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 3.0.5, 6.0.0.5
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Frontend Dashboard and ProfileGrid WordPress plugins are affected. An unauthenticated attacker could inject a crafted PHP object that is processed when a public profile is viewed, potentially allowing arbitrary file writes and remote code execution on the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to arbitrary file write and potential remote code execution.
Affected versions
- Unknown Frontend Dashboard
fixed in 3.0.5
- Unknown ProfileGrid
fixed in 6.0.0.5