title: Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
description: The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
vendor: Unknown
product: Shortcodes and extra features for Phlox theme
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.10.7
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}