1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3203 more potentially affected by CVE-2021-32012 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32012 Source advisory: SNYK:JS-XLSX-1311141...

WordPress JoomSport plugin <= 5.1.5 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Bugbang in WordPress JoomSport plugin versions = 5.1.5. Solution Update the WordPress JoomSport plugin to the latest available version at least 5.1.8...

JoomSport < 5.1.8 - Unauthenticated PHP Object Injection

The joomsportmdload AJAX action of the plugin, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even though the plugin does not have a suitable gadget chain to exploit this, other...

JoomSport < 5.1.8 - Unauthenticated PHP Object Injection

The joomsportmdload AJAX action of the plugin, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even though the plugin does not have a suitable gadget chain to exploit this, other...

PHPMailer code issue vulnerability

PHPMailer is a PHP class library for sending emails. PHPMailer is vulnerable to a code issue that allows object injection via addAttachment with a UNC pathname via Phar deserialization. No details of the vulnerability are currently available...

WordPress 4.0.x < 4.0.33 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 4.1.x < 4.1.33 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 5.3.x < 5.3.8 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 5.4.x < 5.4.6 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 4.3.x < 4.3.26 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 4.6.x < 4.6.21 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

CM Registration Pro < 3.2.1 - PHP Object Injection

The plugin was using an outdated library which was affected by a PHP Object Injection issue. The free version is not affected as it was not using the library even though it was skipped with it...

WordPress 5.6.x < 5.6.4 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 4.2.x < 4.2.30 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 5.1.x < 5.1.10 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 3.7.x < 3.7.36 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress CM Registration Pro premium plugin <= 3.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by WPScan Team in WordPress CM Registration Pro premium plugin versions = 3.2.0. Solution Update the WordPress CM Registration Pro premium plugin to the latest available version at least 3.2.1...

WordPress 5.0.x < 5.0.13 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 5.2.x < 5.2.11 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress 4.9.x < 4.9.18 Object injection

According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...