wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.
Max Base Score | 7.5 |
Published | 2014-08-18 |
Updated | 2014-08-28 |
EPSS | 5.18% |
1 vulnerabilities found