8631 matches found
WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Free Stock Photos Foter versions = 1.5.4...
WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin TAKETIN To WP Membership versions = 2.8.17...
WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Recently versions = 1.1...
WordPress Free Stock Photos Foter Plugin <= 1.5.4 is vulnerable to PHP Object Injection
Software Free Stock Photos Foter Type Plugin Vulnerable versions = 1.5.4 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49227 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0e6ee5afeccb Credits LVT-tholv2k Required privilege...
WordPress Recently Plugin <= 1.1 is vulnerable to PHP Object Injection
Software Recently Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49218 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dfdd033e65c6 Credits LVT-tholv2k Required privilege Unauthenticated...
WordPress TAKETIN To WP Membership Plugin <= 2.8.1 is vulnerable to PHP Object Injection
Software TAKETIN To WP Membership Type Plugin Vulnerable versions = 2.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49226 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID e430761eddd4 Credits LVT-tholv2k Required privilege...
CVE-2024-48033
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
CVE-2024-48033 WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
CVE-2024-48033
CVE-2024-48033 describes a deserialization of untrusted data vulnerability enabling PHP Object Injection in the WordPress Talkback plugin (versions <= 1.0). The affected component is the Talkback secure linkback protocol, with unauthenticated access and a high-impact CVSS of 9.8 (Network, No u...
CVE-2024-48033 WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
PT-2024-32951 · Talkback · Talkback
Name of the Vulnerable Software and Affected Versions: Talkback versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Talkback. Recommendations: For versions n/a through 1.0, at the moment, there is no information about a...
CVE-2024-47636
Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9...
CVE-2024-47636
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through = 2.5.9...
CVE-2024-47636 WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch allows Object Injection.This issue affects JobSearch: from n/a through = 2.5.9...
CVE-2024-47636
CVE-2024-47636 is a deserialization-based PHP Object Injection vulnerability in the WordPress plugin WP JobSearch (JobSearch WP Job Board) up to version 2.5.9 . The issue arises from deserializing untrusted data, enabling potential object injection and remote impact. The vulnerability is rated CR...
CVE-2024-47636 WordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9...
PT-2024-32694 · Eyecix · Eyecix Jobsearch
Name of the Vulnerable Software and Affected Versions: Eyecix JobSearch versions n/a through 2.5.9 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection in Eyecix JobSearch. This enables potential remote attacks on affected systems. Recommendations: For...
CVE-2024-8015
In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.924, a remote code execution attack is possible through object injection via an insecure type resolution vulnerability...