CVE-2023-46615

🗓️ 12 Feb 2024 08:25:38Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon. This issue affects KD Coming Soon: from n/a through 1.7

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Deserialization of Untrusted Data in Kallidan Kd_Coming_Soon	30 Nov 202314:46	–	githubexploit
Circl	CVE-2023-46615	12 Feb 202410:22	–	circl
CNNVD	WordPress Plugin KD Coming Soon Code Issue Vulnerability	12 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-46615 WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection	12 Feb 202408:25	–	cvelist
EUVD	EUVD-2023-50817	3 Oct 202520:07	–	euvd
NVD	CVE-2023-46615	12 Feb 202409:15	–	nvd
Patchstack	WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection	24 Oct 202300:00	–	patchstack
Prion	Deserialization of untrusted data	12 Feb 202409:15	–	prion
Positive Technologies	PT-2023-30113 · Unknown · Kalli Dan Kd Coming Soon	30 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-46615	23 May 202504:52	–	redhatcve

NVD

Vulners

Node

kallidan kd_coming_soonRange≤1.7wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "kd-coming-soon",
    "product": "KD Coming Soon",
    "vendor": "Kalli Dan.",
    "versions": [
      {
        "lessThanOrEqual": "1.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/kd-coming-soon/wordpress-kd-coming-soon-plugin-1-7-php-object-injection-vulnerability

Parameter	Position	Path	Description	CWE
cetitle	request body	/wp-admin/admin-ajax.php?action=kd_cemailer&nonce=c0465c51ee	Unauthenticated PHP Object Injection via deserialization of cetitle in kd_cemailer (KD Coming Soon <= 1.7).	CWE-502

28 Apr 2026 19:21Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.4 - 9.8

EPSS0.05588

SSVC

CWE-502