WordPress Frontend Dashboard and ProfileGrid PHP Object Injection Vulnerability

The Frontend Dashboard WordPress plugin before 3.0.5 and the ProfileGrid WordPress plugin before 6.0.0.5 contain a PHP object injection vulnerability.

An unauthenticated user can store a serialized PHP object in user metadata. This object is deserialized when a public profile is viewed.

• Affected: Frontend Dashboard before 3.0.5
• Affected: ProfileGrid before 6.0.0.5
• Impact: arbitrary file write and potential remote code execution