wpwax Post Grid, Slider & Carousel Ultimate Plugin up to 1.6.7 on WordPress outpost_shortcode_metabox_markup deserialization

Summaryinfo

A vulnerability labeled as critical has been found in wpwax Post Grid, Slider & Carousel Ultimate Plugin up to 1.6.7 on WordPress. This affects the function outpost_shortcode_metabox_markup. The manipulation results in deserialization. This vulnerability is known as CVE-2024-2006. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability classified as critical has been found in wpwax Post Grid, Slider & Carousel Ultimate Plugin up to 1.6.7 on WordPress (WordPress Plugin). Affected is the function outpost_shortcode_metabox_markup. The manipulation with an unknown input leads to a deserialization vulnerability. CWE is classifying the issue as CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.7 via deserialization of untrusted input in the outpost_shortcode_metabox_markup function. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

The weakness was published 03/13/2024 by Francesco Carlucci. The advisory is available at wordfence.com. This vulnerability is traded as CVE-2024-2006 since 02/29/2024. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 03/13/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• WordPress Plugin

Vendor

• wpwax

Name

• Post Grid, Slider & Carousel Ultimate Plugin

Version

• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.5
• 1.6.6
• 1.6.7

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion