CVE-2024-37502

Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through = 2.6.3...

CVE-2021-37502

creationtimestamp| type| source ---|---|--- 2025-03-26 18:25:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8914...

CVE-2024-37502 WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login.This issue affects WooCommerce Social Login: from n/a through 2.6.3...

CVE-2024-37502

CVE-2024-37502 affects the WooCommerce – Social Login plugin for WordPress, with affected versions up to 2.6.3. The vulnerability is described in the connected Wordfence entry as an unauthenticated PHP Object Injection resulting from deserialization of untrusted data. Impact is described as high ...

WordPress WooCommerce Social Login Plugin <= 2.6.3 is vulnerable to PHP Object Injection

Software WooCommerce Social Login Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.7.0 OWASP Top 10 A5: Security Misconfiguration Classification PHP Object Injection CVE CVE-2024-37502 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 642655a733d8 Credits Ananda Dhak...

CVE-2023-37502

The CVE-2023-37502 issue affects HCL Compass (file upload). The connected CNVD and CNNVD entries describe an unrestricted file upload vulnerability due to inadequate validation of uploaded files, enabling an attacker to upload files containing active code that could execute on the server (e.g., P...

CVE-2023-37502 An unrestricted file upload vulnerability affects HCL Compass

HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser...

CVE-2023-37502 An unrestricted file upload vulnerability affects HCL Compass

HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser...

CVE-2021-37502

CVE-2021-37502 concerns automad 1.7.5. The vulnerability is a Cross-Site Scripting (XSS) flaw in the user-creation flow, exploitable via the username field when adding a new user. The root cause appears to be insufficient input validation/escaping in accounts.php, allowing injected JavaScript to ...