CVE-2023-4971

The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog.

Score

CVSS 3.1 7.2 High

Status

Modified - contact@wpscan.com

Published

2023-10-16

Last modified

2025-04-23

Weaknesses

CWE-502

Affected products

• Weaver Xtreme Theme Support (Unknown)
• Weaver Xtreme Theme Support (Weavertheme)

References

• https://wpscan.com/vulnerability/421194e1-6c3f-4972-8f3c-de1b9d2bcb13