2 matches found
CVE-2025-14476: Deserialization of Untrusted Data
The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.46 via deserialization of untrusted input from the content.txt file within uploaded ZIP archives. This makes it possible for authenticated...
8.8CVSS6.2AI score0.00547EPSS
SaveExploits0References1
PT-2025-51078
Name of the Vulnerable Software and Affected Versions Doubly – Cross Domain Copy Paste for WordPress plugin versions up to and including 1.0.46 Description The Doubly – Cross Domain Copy Paste for WordPress plugin is susceptible to PHP Object Injection. This occurs through the deserialization of...
8.8CVSS6.9AI score0.00547EPSS
SaveExploits0References11
20