Lucene search
K

118 matches found

Patchstack
Patchstack
added 6 days ago8 views

WordPress WooCommerce Infinite Scroll and Ajax Pagination plugin <= 1.8 - Authenticated (Subscriber+) PHP Object Injection vulnerability

Authenticated Subscriber+ PHP Object Injection vulnerability discovered by cuokon in WordPress Plugin WooCommerce Infinite Scroll versions = 1.8...

8.8CVSS5.8AI score0.0008EPSS
Exploits0References1Affected Software1
NVD
NVD
added 6 days ago10 views

CVE-2025-11993

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'importsettings' function. This is due to deserialization of untrusted data supplied via the import...

8.8CVSS0.0008EPSS
Exploits0References2
Cvelist
Cvelist
added 6 days ago31 views

CVE-2025-11993 WooCommerce Infinite Scroll and Ajax Pagination <= 1.8 - Authenticated (Subscriber+) PHP Object Injection

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'importsettings' function. This is due to deserialization of untrusted data supplied via the import...

8.8CVSS0.0008EPSS
Exploits0References2
EUVD
EUVD
added 6 days ago9 views

EUVD-2025-209981

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'importsettings' function. This is due to deserialization of untrusted data supplied via the import...

8.8CVSS6AI score0.0008EPSS
Exploits0References2
CVE
CVE
added 6 days ago11 views

CVE-2025-11993

CVE-2025-11993 affects the WordPress plugin “WooCommerce Infinite Scroll and Ajax Pagination” (versions up to 1.8). The issue is a PHP Object Injection via the import_settings function’s settings parameter, caused by deserializing untrusted data without capability checks. An authenticated attacke...

8.8CVSS6AI score0.0008EPSS
Exploits0References2
CNNVD
CNNVD
added 6 days ago4 views

WordPress plugin WooCommerce Infinite Scroll and Ajax Pagination 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS6AI score0.0008EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 6 days ago5 views

PT-2026-44749

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'import settings' function. This is due to deserialization of untrusted data supplied via the import...

8.8CVSS6AI score0.0008EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/26 5:2 p.m.0 views

CVE-2026-27045

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...

8.8CVSS5.8AI score0.00071EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.0 views

EUVD-2026-15760

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...

5.8AI score0.00071EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.1 views

CVE-2026-27045

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...

8.8CVSS0.00071EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.4 views

CVE-2026-27045

CVE-2026-27045 is a Deserialization of Untrusted Data vulnerability in the WordPress plugin sb-woocommerce-infinite-scroll. It enables PHP Object Injection in WooCommerce Infinite Scroll for versions from n/a to 1.6.2. CVSS v3.1 base score 8.8 (NETWORK, PRIV: LOW, UI: NONE, C/H/I/A: HIGH). The co...

8.8CVSS5.8AI score0.00071EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.2 views

CVE-2026-27045 WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...

8.8CVSS5.8AI score0.00071EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.21 views

CVE-2026-27045 WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...

8.8CVSS0.00071EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.0 views

PT-2026-27965

Name of the Vulnerable Software and Affected Versions WooCommerce Infinite Scroll versions through 1.6.2 Description The software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. Recommendations Update WooCommerce Infinite Scroll to a version...

8.8CVSS5.9AI score0.00071EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.1 views

WordPress plugin WooCommerce Infinite Scroll 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS5.9AI score0.00071EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/16 10:23 a.m.1 views

WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WooCommerce Infinite Scroll versions = 1.6.2...

8.8CVSS5.8AI score0.00071EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/31 12:0 a.m.2 views

PT-2026-5501

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse custom args function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expo...

5.3CVSS5.9AI score0.00026EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1700

Malware in sbrugna...

6.8CVSS6.4AI score0.00126EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-55607

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00077EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-28308

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00498EPSS
Exploits0References1
Rows per page
Query Builder