WordPress WS Form LITE PHP Object Injection

The WS Form LITE plugin for WordPress is vulnerable to PHP Object Injection.

Attackers can exploit this by submitting malicious form data, allowing them to inject PHP objects.

This vulnerability has no direct impact, but if another plugin or theme with a PHP Object Injection (POP) chain is installed, it could allow attackers to delete files, retrieve sensitive data, or execute code.