Problem: The client reported a Remote Code Execution (RCE) POP Chains vulnerability in the WPML String Translation plugin, specifically in the file located at
. This vulnerability could allow an attacker to take control of deserialized objects. Solution: We have released a new version of WPML that addresses this security issue. We recommend that you update both WPML and all WPML addons to ensure your site's security is up to date.
If this solution does not seem relevant to your current situation, or if it appears outdated, we highly recommend checking the related known issues, verifying the version of the permanent fix, and confirming that you have installed the latest versions of themes and plugins. Should you need further assistance, please do not hesitate to open a new support ticket at WPML support forum.
