{"id":18682372,"date":"2025-10-15T14:57:25","date_gmt":"2025-10-15T14:57:25","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=18682372"},"modified":"2025-10-15T15:43:56","modified_gmt":"2025-10-15T15:43:56","slug":"plugin-vulnerable-to-php-object-injection","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/plugin-vulnerable-to-php-object-injection\/","title":{"rendered":"Plugin vulnerable to PHP Object Injection"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hi,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I wanted to bring to your attention that a PHP Object Injection vulnerability has been reported for your plugin <strong>&#8220;Connector for Gravity Forms and Google Sheets&#8221;<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Details:<\/strong><\/p>\n\n\n\n<ul>\n<li><strong>Vulnerability Type:<\/strong> PHP Object Injection<\/li>\n\n\n\n<li><strong>Detected On:<\/strong> August 8, 2025<\/li>\n\n\n\n<li><strong>Affected Versions:<\/strong> \u2264 1.2.5<\/li>\n\n\n\n<li><strong>Current Status:<\/strong> No fix or update package available<br \/><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This issue was flagged by a website security scanner, which recommends addressing the vulnerability as soon as possible to prevent potential exploitation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Could you please confirm if there\u2019s an upcoming patch or workaround available to mitigate this risk?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you for your attention to this matter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Best regards,<br \/>Joevil<br \/><br \/><strong>Patchstack Report Reference:<\/strong><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<pre class=\"wp-block-code\"><code>https:&#047;&#047;patchstack.com\/database\/wordpress\/plugin\/wp-gravity-forms-spreadsheets\/vulnerability\/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability<\/code><\/pre>\n<\/blockquote>\n","protected":false},"template":"","class_list":["post-18682372","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18682372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":2,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18682372\/revisions"}],"predecessor-version":[{"id":18682450,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18682372\/revisions\/18682450"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18682372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}