Critical · published March 19, 2025
🚨 A sneaky PHP Object Injection vulnerability lurks in CozyStay and TinySalt plugins for WordPress, affecting all versions up to 1.7.0 and 3.9.0 respectively! 🔥 Think of this vulnerability like a guest at a fancy hotel who suddenly finds the key to every room—unauthenticated attackers can exploit untrusted input and potentially wreak havoc if the right conditions are in place. If an attacker leverages this flaw alongside a vulnerable plugin or theme containing a PHP Object Pollution (POP) chain, they could potentially delete crucial files, access sensitive information, or even execute arbitrary code. The damage could range from an inconvenience to catastrophic data breaches, depending on what the attacker can access. This is a critical risk, and it needs your attention!
Think of this vulnerability like a guest at a fancy hotel who suddenly finds the key to every room—unauthenticated attackers can exploit untrusted input and potentially wreak havoc if the right conditions are in place. This vulnerability in CozyStay and TinySalt allows for PHP Object Injection due to deserialization of untrusted input in the 'ajax_handler' function. If another plugin or theme containing a POP chain is installed, the vulnerability could be exploited.
If an attacker leverages this flaw alongside a vulnerable plugin or theme containing a PHP Object Pollution (POP) chain, they could potentially delete crucial files, access sensitive information, or even execute arbitrary code. The damage could range from an inconvenience to catastrophic data breaches, depending on what the attacker can access. This is a critical risk, and it needs your attention! To mitigate this vulnerability, immediately update CozyStay to version 1.7.1 and TinySalt to version 3.9.1. Review your installed plugins and themes for any POP chains that could be exploited and consider disabling any unnecessary ones to reduce your risk. You've got this! Patch those plugins and secure your site like the hero you are! 🛡️