CVE-2017-18604 (sitebuilder_dynamic_components)

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

View Full Alert