WordPress Ultimate Product Catalog 4.2.24 PHP Object Injection WordPress Ultimate Product Catalog plugin versions 4.2.24 and below suffer from a PHP object injection vulnerability. Leave a ReplyYou must be logged in to post a comment. Filed under: exploit - @ October 31, 2017 5:26 pm