Lucene search
PatchstackCVELIST:CVE-2023-34027HistoryDec 19, 2023 - 7:44 p.m.
CVE-2023-34027 WordPress Recently Viewed Products Plugin <= 1.0.0 is vulnerable to PHP Object Injection
2023-12-1919:44:44
CWE-502
Patchstack
www.cve.org
4
wordpress
recently viewed products
php object injection
vulnerability
rajnish arora
deserialization
untrusted data
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
31.1%
Deserialization of Untrusted Data vulnerability in Rajnish Arora Recently Viewed Products.This issue affects Recently Viewed Products: from n/a through 1.0.0.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "recently-viewed-products",
"product": "Recently Viewed Products",
"vendor": "Rajnish Arora",
"versions": [
{
"lessThanOrEqual": "1.0.0",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-34027
2023-12-19 20:15:07
prion
prion
Deserialization of untrusted data
2023-12-19 20:15:00
nvd
nvd
CVE-2023-34027
2023-12-19 20:15:07
wordfence
wordfence
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
31.1%
Related for CVELIST:CVE-2023-34027