Trail of Bits Fickling deserialization injection vulnerability

Versions 0.1.12 and earlier of Trail of Bits Fickling contain a security vulnerability. This vulnerability stems from improper tracking during the parsing and import of pickle STACKGLOBAL operands containing the dot notation qualname. Only the beginning portion of the name is recorded, and...

Trail of Bits Fickling deserialization injection vulnerability

Versions 0.1.12 and earlier of Trail of Bits Fickling contain a security vulnerability. This vulnerability arises because the processimport method in fickle.py adds the import names of standard library modules to the likelysafeimports set without verifying their actual parsing behavior or usage...

ThemeREX Bonbon deserialization injection vulnerability

ThemeREX Bonbon versions 1.11 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

WordPress WPCargo Track & Trace deserialization injection vulnerability

WordPress WPCargo Track & Trace versions 8.0.5 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...

ThemeREX Nuts deserialization injection vulnerability

ThemeREX Nuts versions 1.12 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

WordPress Extra Fees Plugin for WooCommerce deserialization injection vulnerability

WordPress Extra Fees Plugin for WooCommerce versions 4.4.0 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...

ThemeREX Gamic deserialization injection vulnerability

ThemeREX Gamic versions 1.19 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX Printy deserialization injection vulnerability

ThemeREX Printy versions 1.13.0 and earlier contain a deserialization injection vulnerability. This vulnerability arises from PHP object injection when no authentication is performed...

Fast Themes Sastra Essential Addons for Elementor deserialization injection vulnerability

Fast Themes Sastra Essential Addons for Elementor versions 1.2.3 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection, which may allow attackers with author privileges to inject malicious objects and execute arbitrary code...

ThemeREX Mission deserialization injection vulnerability

ThemeREX Mission versions 1.22 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX Motorix deserialization injection vulnerability

ThemeREX Motorix versions 1.11 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX Ozisti deserialization injection vulnerability

ThemeREX Ozisti versions 1.1.10 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX Good Homes deserialization injection vulnerability

ThemeREX Good Homes versions 1.3.13 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX EmojiNation deserialization injection vulnerability

ThemeREX EmojiNation versions 1.0.12 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

WordPress Finale Lite deserialization injection vulnerability

WordPress Finale Lite versions 2.21.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection and could potentially be exploited by store administrators...

10websocial deserialization injection vulnerability

Versions 1.5.6 and earlier of 10websocial contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection under Contributor privileges...

ThemeREX RexCoin deserialization injection vulnerability

ThemeREX RexCoin versions 1.2.6 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

ThemeREX Muzicon deserialization injection vulnerability

ThemeREX Muzicon versions 1.15 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

WordPress Frisbii Pay deserialization injection vulnerability

WordPress Frisbii Pay versions 1.8.19 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...

ThemeREX Marcell deserialization injection vulnerability

ThemeREX Marcell versions 1.2.14 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...