8759 matches found
WordPress TinySalt theme < 3.10.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme TinySalt versions 3.10.0...
WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme CozyStay versions 1.7.1...
WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Themify Edmin versions = 2.0.0...
📄 vBulletin 4.x movepm PHP Object Injection
In vBulletin 4.x, a flawed security patch from 2014 has introduced a new post-auth PHP object injection vector by replacing serialize with jsonencode — ironically making it possible to get vBulletin to sign attacker-controlled base64-encoded payloads, potentially allowing users to perform remote...
WordPress CozyStay Theme < 1.7.1 is vulnerable to PHP Object Injection
Software CozyStay Type Theme Vulnerable versions 1.7.1 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49507 Patch priority High CVSS severity High 9.8 Developer LoftOcean PSID 87cadbf62283 Credits Bonds Required privilege Unauthenticated Published 9 Jun...
WordPress Themify Edmin Theme <= 2.0.0 is vulnerable to PHP Object Injection
Software Themify Edmin Type Theme Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31047 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID c525fceb3917 Credits Phat RiO - BlueRock Required privilege...
WordPress and WordPress plugin code issues vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-24486 · Themeton · Themeton Pressgrid - Frontend Publish Reaction & Multimedia Theme
Name of the Vulnerable Software and Affected Versions: themeton PressGrid - Frontend Publish Reaction & Multimedia Theme versions 1.3.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches...
PT-2025-24483 · Unknown · Pimp - Creative Multipurpose
Name of the Vulnerable Software and Affected Versions: PIMP - Creative MultiPurpose versions 1.7 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.7 and earlier, update to a version that contains a fi...
WordPress plugin The Fashion - Model Agency One Page Beauty Theme Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress and WordPress plugin code issues vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress和WordPress plugin 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
PT-2025-24482 · WordPress · Flap - Business Wordpress Theme
Name of the Vulnerable Software and Affected Versions: FLAP - Business WordPress Theme versions 1.5 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, although specific details about the estimated...
WordPress TinySalt Theme < 3.10.0 is vulnerable to PHP Object Injection
Software TinySalt Type Theme Vulnerable versions 3.10.0 Fixed in 3.10.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49455 Patch priority High CVSS severity High 9.8 Developer LoftOcean PSID 832baca8d9fd Credits Bonds Required privilege Unauthenticated Published 9...
PT-2025-24477 · Unknown · The Fashion - Model Agency One Page Beauty Theme
Name of the Vulnerable Software and Affected Versions: The Fashion - Model Agency One Page Beauty Theme versions 1.4.4 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.4.4 and earlier, update to a...
CVE-2025-49072
Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through 1.2.12.1...
CVE-2025-49073
Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...
CVE-2025-39358
Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...
