{"cvss":0.0,"datePublished":"2017-10-02T00:00:00Z","dateUpdated":"2017-10-02T00:00:00Z","description":"The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors.","dueDate":"","id":"CVE-2017-20207","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Flickr Gallery Plugin for WordPress","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"dancoulter flickr_gallery Deserialization of Untrusted Data","vendor":"Dan Coulter"}