by Kastro
Paper/Archive/CVE-2020-36726

CVE-2020-36726

rustaurius Ultimate Reviews — Ultimate Reviews < 2.1.33 - PHP Object Injection

EPSS 2%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 75.1.751 × 2015.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin.

Affected

ProductAffectedFixed inSource
Ultimate Reviews< 2.1.332.1.33CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/db30acd7-ce51-45d9-8ff0-6ceea8237a8c?source=cverefblog.nintechnet.com/wordpress-ultimate-reviews-plugin-fixed-insecure-deserialization-vulnerabilityrefplugins.trac.wordpress.org/changeset/2409141