TI-2024-07008 CVE-2024-7561 · GHSA-5x7r-c22r-cm2c
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Priority MEDIUM 41
The The Next theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input from the wpeden_post_meta post meta value.