8632 matches found
PT-2024-33581 · Unknown · Piyushmca Shipyaari Shipping Management
Name of the Vulnerable Software and Affected Versions: Piyushmca Shipyaari Shipping Management versions 1.2 and earlier Description: The Deserialization of Untrusted Data issue in Piyushmca Shipyaari Shipping Management allows Object Injection. This permits an attacker to inject malicious objects...
PT-2024-33579 · Smartdevth · Smartdevth Advanced Advertising System
Name of the Vulnerable Software and Affected Versions: Smartdevth Advanced Advertising System versions 1.3.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in the Smartdevth Advanced Advertising System. Recommendations: For versio...
PT-2024-33474 · Unknown · Giveaway Boost
Name of the Vulnerable Software and Affected Versions: Giveaway Boost versions n/a through 2.1.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a security problem where an attacker can inject malicious objects into the system...
PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components
Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...
WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Shipyaari Shipping Management versions = 1.2...
WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SiteBuilder Dynamic Components versions = 1.0...
WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Advanced Advertising System versions = 1.3.1...
WordPress WP Easy Post Types plugin <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection vulnerability
Authenticated Subscriber+ PHP Object Injection vulnerability discovered by István Márton in WordPress Plugin Easy Post Types versions = 1.4.4...
CVE-2024-10079
The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...
CVE-2024-10079
The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...
CVE-2024-10079 WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...
CVE-2024-10079
CVE-2024-10079 refers to WP Easy Post Types for WordPress (
CVE-2024-10079 WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...
WordPress Easy Post Types Plugin <= 1.4.4 is vulnerable to PHP Object Injection
Software Easy Post Types Type Plugin Vulnerable versions = 1.4.4 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-10079 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID da4c9b968b4a Credits István Márton Required privilege Subscribe...
WordPress plugin WP Easy Post Types 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress Shipyaari Shipping Management Plugin <= 1.2 is vulnerable to PHP Object Injection
Software Shipyaari Shipping Management Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49626 Patch priority Medium CVSS severity Medium 9.8 Developer Claim ownership PSID 33313dc069f7 Credits Mika Required privilege...
WordPress Advanced Advertising System Plugin <= 1.3.1 is vulnerable to PHP Object Injection
Software Advanced Advertising System Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49624 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 02d433e2c1ec Credits Mika Required privilege...
PT-2024-16012 · WordPress · Wp Easy Post Types
Name of the Vulnerable Software and Affected Versions: WP Easy Post Types plugin for WordPress versions up to, and including, 1.4.4 Description: The issue concerns PHP Object Injection via deserialization of untrusted input from the text parameter in the ajax import content function. This allows...
WordPress SiteBuilder Dynamic Components Plugin <= 1.0 is vulnerable to PHP Object Injection
Software SiteBuilder Dynamic Components Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49625 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 7e4e11ce38e6 Credits Mika Required privilege...