CVE-2024-56058

Summary (CVE-2024-56058): WordPress VRPConnector plugin versions ≤ 2.0.1 are affected by a deserialization of untrusted data vulnerability that enables PHP Object Injection. The issue allows unauthenticated attackers to inject a PHP object, potentially leading to compromise such as arbitrary file...

CVE-2024-56059 WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in farinspace Partners partners allows Object Injection.This issue affects Partners: from n/a through = 0.2.0...

CVE-2024-56059 WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mighty Digital Partners allows Object Injection.This issue affects Partners: from n/a through 0.2.0...

CVE-2024-56059

CVE-2024-56059: WordPress Partners plugin (versions

PT-2024-36693 · Gueststream · Gueststream Vrpconnector

Name of the Vulnerable Software and Affected Versions: Gueststream VRPConnector versions n/a through 2.0.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection in the Gueststream VRPConnector. This is a type of vulnerability where an attacker c...

PT-2024-36694 · Unknown · Mighty Digital Partners

Name of the Vulnerable Software and Affected Versions: Mighty Digital Partners versions n/a through 0.2.0 Description: The issue is related to an Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution', which allows Object Injection. This enables...

WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Partners versions = 0.2.0...

WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin VRPConnector versions = 2.0.1...

CVE-2024-12687

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-12687

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-12687

CVE-2024-12687 describes a deserialization of untrusted data vulnerability in PlexTrac (Runbooks modules) that enables Object Injection and arbitrary file writes. Affected versions are PlexTrac 1.61.3 up to before 2.8.1. The issue arises from deserializing untrusted data, which can lead to high-s...

CVE-2024-12687 Insecure YAML Deserialization

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-12687 Insecure YAML Deserialization

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-54367

Deserialization of Untrusted Data vulnerability in ForumWP ForumWP allows Object Injection.This issue affects ForumWP: from n/a through 2.1.0...

CVE-2024-54367

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

CVE-2024-54367

CVE-2024-54367 affects ForumWP (ForumWP) up to version 2.1.0. Deserialization of untrusted data enables PHP object injection (unauthenticated). The Red Hat/Wordfence entries indicate the issue is acknowledged and patched in 2.1.0; remediation is to upgrade to the patched version (2.1.0) or later.

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in PlexTrac version 1.61.3 through versions prior to 2.8.1, which stems from the presence of an untrusted data deserialization vulnerability that allows object...

PT-2024-36253 · Forumwp · Forumwp

Name of the Vulnerable Software and Affected Versions: ForumWP versions 2.1.0 and earlier Description: The issue is related to the deserialization of untrusted data, allowing object injection. This can potentially lead to security breaches. Recommendations: For versions 2.1.0 and earlier, update ...