6.5
Moyenne
CVE-2026-1542 The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated…
Description
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Super Stage WP 1.0 | premières → 1.0.1 | Pas de correctif indiqué |