8635 matches found
CVE-2024-52439 WordPress Team Rosters plugin <= 4.6 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Mark O’Donnell Team Rosters allows Object Injection.This issue affects Team Rosters: from n/a through 4.6...
CVE-2024-52439
CVE-2024-52439 describes a deserialization of untrusted data vulnerability in the WordPress plugin Team Rosters (versions up to 4.6). The root cause is a PHP Object Injection flaw arising from deserializing untrusted data, which could allow an attacker to inject objects. The connected documents c...
CVE-2024-52439 WordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Mark O'Donnell Team Rosters team-rosters allows Object Injection.This issue affects Team Rosters: from n/a through = 4.8.2...
CVE-2024-52440
CVE-2024-52440 is a deserialization (PHP object injection) vulnerability in the WordPress Xpresslane Fast Checkout plugin. It affects versions up to and including 1.0.0 and stems from deserializing untrusted data, enabling object injection. The CVE entry is supported by multiple sources (NVD/Red ...
CVE-2024-52440 WordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Bueno Labs Pvt. Ltd. Xpresslane Fast Checkout allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through 1.0.0...
CVE-2024-52441 WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through = 1.0.1...
CVE-2024-52441 WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through = 1.0.1...
CVE-2024-52441
CVE-2024-52441 affects the WordPress Quick Learn plugin (versions n/a–1.0.1). The issue is an Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) that enables Object Injection. Public records in the provided documents confirm the vulnerability type and affected...
CVE-2024-52443 WordPress Geolocator plugin <= 1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in masikonis Geolocator geolocator allows Object Injection.This issue affects Geolocator: from n/a through = 1.1...
CVE-2024-52443 WordPress Geolocator plugin <= 1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Nerijus Masikonis Geolocator allows Object Injection.This issue affects Geolocator: from n/a through 1.1...
CVE-2024-52445 WordPress QRMenu Restaurant QR Menu Lite plugin <= 1.0.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ModelTheme QRMenu Restaurant QR Menu Lite qrmenu-lite allows Object Injection.This issue affects QRMenu Restaurant QR Menu Lite: from n/a through = 1.0.4...
CVE-2024-52445 WordPress QRMenu Restaurant QR Menu Lite plugin <= 1.0.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Modeltheme QRMenu Restaurant QR Menu Lite allows Object Injection.This issue affects QRMenu Restaurant QR Menu Lite: from n/a through 1.0.3...
CVE-2024-52446 WordPress Buying Buddy IDX CRM plugin <= 1.2.8 - CSRF to PHP Object Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object Injection.This issue affects Buying Buddy IDX CRM: from n/a through = 1.2.8...
CVE-2024-52446
CVE-2024-52446 is a CSRF to PHP Object Injection vulnerability affecting the Buying Buddy IDX CRM WordPress plugin (affected: <= 1.1.12). The core issue is CSRF-enabled object injection, enabling an attacker to trigger unintended object deserialization via forged requests. Public references fr...
CVE-2024-52446 WordPress Buying Buddy IDX CRM plugin <= 1.1.12 - CSRF to PHP Object Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in Buying Buddy Buying Buddy IDX CRM allows Object Injection.This issue affects Buying Buddy IDX CRM: from n/a through 1.1.12...
WordPress Clone plugin <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace' vulnerability
Unauthenticated PHP Object Injection via 'recursiveunserializedreplace' vulnerability discovered by Webbernaut in WordPress Plugin Clone versions = 2.4.6...
WordPress Clone Plugin <= 2.4.6 is vulnerable to PHP Object Injection
Software Clone Type Plugin Vulnerable versions = 2.4.6 Fixed in 2.4.7 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-10913 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 3676e7fb18ec Credits Webbernaut Required privilege Unauthenticated...
PT-2024-35280 · Bueno Labs Pvt. · Xpresslane Fast Checkout
Name of the Vulnerable Software and Affected Versions: Bueno Labs Pvt. Ltd. Xpresslane Fast Checkout versions 1.0.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Xpresslane Fast Checkout. Recommendations: For versions 1.0.0 an...
WordPress plugin Xpresslane Fast Checkout Plugin 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress plugin Buying Buddy IDX CRM 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...