Input validation vulnerability in WP Easy Post Types 1.4.4

A plugin called WP Easy Post Types for WordPress has a security issue in versions up to 1.4.4. This issue is known as PHP Object Injection and it happens when untrustworthy information is used in the ‘text’ parameter of the ‘ajax_import_content’ function. This can be exploited by attackers who have subscriber-level permissions or higher, to inject a PHP Object. If there is another plugin or theme installed on the website that has a POP chain, the attacker could potentially delete important files, access private information, or run code.