Description
WordPress Plugin WP Smart Security is prone to a vulnerability that lets remote attackers inject and execute arbitrary code because the application fails to sanitize user-supplied input before being passed to the unserialize() PHP function. Attackers can possibly exploit this issue to execute arbitrary PHP code within the context of the affected webserver process. WordPress Plugin WP Smart Security version 1.0 is vulnerable.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-4354)
PHP Improper Input Validation Vulnerability (CVE-2007-5128)
MySQL CVE-2012-0489 Vulnerability (CVE-2012-0489)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.17)
WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)