Lucene search
K

8050 matches found

CNNVD
CNNVD
added 2026/03/18 12:0 a.m.5 views

WordPress Plugin Traveler 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

9.8CVSS5.9AI score0.00322EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.9 views

jsPDF 安全漏洞

jsPDF is a JavaScript-based PDF document generation library developed by Parallax. Versions of jsPDF prior to 4.2.1 contained security vulnerabilities. These vulnerabilities stemmed from the possibility that parameters controlling the createAnnotation method could allow for the injection of...

8.1CVSS5.9AI score0.00275EPSS
Exploits0References5
OSV
OSV
added 2026/03/17 5:7 p.m.4 views

GHSA-7X6V-J9X4-QF24 jsPDF has a PDF Object Injection via FreeText color

Impact User control of arguments of the createAnnotation method allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to the following method, a user can inject arbitrary PDF objects, such as JavaScript actions, which might...

8.1CVSS5.9AI score0.00275EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2026/03/17 5:7 p.m.12 views

jsPDF has a PDF Object Injection via FreeText color

Impact User control of arguments of the createAnnotation method allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to the following method, a user can inject arbitrary PDF objects, such as JavaScript actions, which might...

8.1CVSS5.8AI score0.00275EPSS
Exploits0References6Affected Software1
Patchstack
Patchstack
added 2026/03/17 12:23 p.m.4 views

WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Theme Traveler versions 3.2.8.1...

9.8CVSS5.8AI score0.00322EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/17 10:33 a.m.5 views

WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin EventPrime versions = 4.2.8.0...

9.8CVSS5.8AI score0.0051EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/16 10:23 a.m.4 views

WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WooCommerce Infinite Scroll versions = 1.6.2...

8.8CVSS5.8AI score0.00344EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/16 8:44 a.m.5 views

WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Visionary Core versions = 1.4.9...

8.8CVSS5.8AI score0.00344EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/16 8:44 a.m.7 views

WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Jobica Core versions = 1.4.1...

8.8CVSS5.8AI score0.00344EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/16 7:24 a.m.7 views

WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Organici Library versions = 2.1.2...

8.8CVSS5.8AI score0.00344EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/16 6:22 a.m.8 views

WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme CitiLights versions = 3.7.1...

8.8CVSS5.8AI score0.00344EPSS
Exploits0Affected Software1
GithubExploit
GithubExploit
added 2026/03/14 8:11 p.m.313 views

Exploit for Improper Input Validation in Typo3

TYPO3 CVE-2020-15099 — Unauthenticated RCE PHP Object Injecti...

8.8CVSS7.9AI score0.01782EPSS
Exploits1
EUVD
EUVD
added 2026/03/13 9:31 p.m.2 views

EUVD-2026-11844

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

5.8AI score0.00355EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.3 views

CVE-2026-32355

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

8.8CVSS0.00355EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 11:42 a.m.11 views

CVE-2026-32355

CVE-2026-32355 affects the WordPress JetEngine plugin (Crocoblock) for WordPress, with vulnerable versions listed as JetEngine

8.8CVSS5.8AI score0.00355EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.25 views

CVE-2026-32355 WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

8.8CVSS0.00355EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.1 views

CVE-2026-32355 WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

5.8AI score0.00355EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:42 a.m.2 views

CVE-2026-32355

Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1...

5.8AI score0.00355EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.5 views

WordPress plugin JetEngine 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

8.8CVSS5.9AI score0.00355EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.4 views

PT-2026-25202

CVE-2026-32355 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through 3.8.4.1. https://t.co/Cl9q0DhF07...

5.8AI score0.00355EPSS
Exploits0References3
Rows per page
Query Builder