| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | = 3.9.0= 3.9.1 |
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free