CVSS base score
What the vulnerability does
The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Explanation of Vulnerability in Simple Terms
WP eCommerce versions 3.15.1 and earlier contain an unspecified vulnerability. Insufficient metadata prevents detailed risk assessment. Site administrators should monitor for vendor security advisories and consider updating to a version newer than 3.15.1 when available.
What an attacker can do
Unknown; insufficient vulnerability details provided.
Potential impact on your site
Unknown impact; patch status and severity cannot be determined from available data.
Conditions required to exploit
Unknown; insufficient vulnerability details provided.
Key dates
External resources
