8684 matches found
WordPress Ninja Tables – Easy Data Table Builder plugin <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution vulnerability
Unauthenticated PHP Object Injection to Limited Remote Code Execution vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ninja Tables versions = 5.0.18...
WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Theme Mr. Murphy versions 1.2.12.1...
WordPress Mr. Murphy Theme < 1.2.12.1 is vulnerable to PHP Object Injection
Software Mr. Murphy Type Theme Vulnerable versions 1.2.12.1 Fixed in 1.2.12.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49072 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 743adbe763dd Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Solar Energy versions = 3.5...
WordPress Solar Energy Theme <= 3.5 is vulnerable to PHP Object Injection
Software Solar Energy Type Theme Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32283 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 835d026bbefc Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
CVE-2025-48336
Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through 3.6.6...
CVE-2025-48336 WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through 3.6.6...
CVE-2025-48336
The provided data confirms CVE-2025-48336 affects the WordPress theme Course Builder (ThimPress Course Builder) with a Deserialization of Untrusted Data vulnerability that enables PHP Object Injection in versions prior to 3.6.6. Root cause: untrusted data deserialization leading to object injecti...
CVE-2025-48336 WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through 3.6.6...
WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by astra.r3verii Patchstack Alliance in WordPress Plugin WP Posts Carousel versions = 1.3.12...
WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Cút lộn xào me Patchstack Alliance in WordPress Theme Course Builder versions 3.6.6...
course-builder 代码问题漏洞
course-builder is an open source application from Overdrive Eletrônica. A code issue vulnerability exists in course-builder versions prior to 3.6.6 that stems from deserializing untrusted data, which could lead to object injection...
WordPress Course Builder Theme < 3.6.6 is vulnerable to PHP Object Injection
Software Course Builder Type Theme Vulnerable versions 3.6.6 Fixed in 3.6.6 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-48336 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 330f3e0387ca Credits Annn Required privilege Unauthenticated...
PT-2025-23196 · Thimpress · Thimpress Course Builder
Name of the Vulnerable Software and Affected Versions: ThimPress Course Builder versions prior to 3.6.6 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can be exploited due to the deserialization of untrusted data, potentially leading to...
CVE-2025-47568
Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds dzs-zoomsounds allows Object Injection.This issue affects ZoomSounds: from n/a through = 6.91...
CVE-2025-47532
Deserialization of Untrusted Data vulnerability in CoinPayments CoinPayments.net Payment Gateway for WooCommerce coinpayments-payment-gateway-for-woocommerce allows Object Injection.This issue affects CoinPayments.net Payment Gateway for WooCommerce: from n/a through = 1.0.17...
CVE-2025-47530
Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through = 3.5.18...
CVE-2025-47660
Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This issue affects WC Affiliate: from n/a through = 2.16...