Input validation vulnerability in Brooklyn | Creative Multipurpose Responsive WordPress Theme 4.9.9.2

The Brooklyn theme for WordPress has a vulnerability that allows attackers to inject a certain type of code called PHP Object. This can only be done by people who have access to the site with at least Subscriber-level permission. However, if the site has another plugin or theme that also has this vulnerability, the attacker may be able to do things like delete files, access private information, or run their own code.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.