writeups.xyz / WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)

Submitter : c2a

Date: 7 March 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• Security Code Review
• RCE

Programs :

• Undisclosed

Authors :

• Joshua Martinelle (@J0_mart)

Link :
https://medium.com/tenable-techblog/wordpress-buddyforms-plugin-unauthenticated-insecure-deserialization-cve-2023-26326-3becb5575ed8