Several PHP compatibility libraries contain a potential remote code execution flaw in their json_decode() function based on having copy pasted existing vulnerable code. Affected components include the WassUp Realtime analytics WordPress plugin, AjaXplorer Core, and more.
15c734bb46c83c88ca1f44b832953d3f324999fb6a6e5fa2aaf519830ded1198