Description
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
Remediation
References
Related Vulnerabilities
WordPress Plugin WPFront User Role Editor Multiple Cross-Site Scripting Vulnerabilities (2.13)
MySQL CVE-2022-21313 Vulnerability (CVE-2022-21313)
MySQL CVE-2020-14620 Vulnerability (CVE-2020-14620)
WordPress Plugin Double Opt-In for Download SQL Injection (2.0.8)
WordPress Plugin TI WooCommerce Wishlist Security Bypass (1.21.11)