Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.5...

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6...

CVE-2024-23513

CVE-2024-23513 is a PHP Object Injection/deserialization vulnerability in WordPress PropertyHive

CVE-2024-24796

CVE-2024-24796 describes a PHP Object Injection (Deserialization of Untrusted Data) vulnerability in the WordPress plugin “MageEventpress” (Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently), affected versions n/a through 4.1.1. Public sources confirm the issue stems from untru...

CVE-2024-24797

CVE-2024-24797 affects the WordPress plugin ERE Recently Viewed – Essential Real Estate Add-On (G5Theme) with Deserialization of Untrusted Data leading to unauthenticated PHP Object Injection. Affected versions are 1.3 and earlier; patch available in version 2.0. The CVE is rated CRITICAL (CVSS 3...

CVE-2024-24797 WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3...

CVE-2024-25100

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4...

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2...

CVE-2024-24926

CVE-2024-24926 describes a deserialization of untrusted data vulnerability in UnitedThemes Brooklyn Theme (WordPress Brooklyn) up to version 4.9.7.6. The connected documents specify a PHP object injection/deserialization flaw as the root cause and list the affected software as the Brooklyn Theme,...

WordPress Plugin Brooklyn Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-20564 · WordPress · Wpevently

Name of the Vulnerable Software and Affected Versions: Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin versions n/a through 4.1.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the Event Manager and Tickets Selling...

PT-2024-20748

Name of the Vulnerable Software and Affected Versions: WP Swings Coupon Referral Program versions 1.7.2 and earlier Description: The issue is related to Deserialization of Untrusted Data in WP Swings Coupon Referral Program. This can potentially lead to exploitation. No information is provided...

WordPress Plugin PropertyHive Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-19914 · Unknown · Propertyhive

Name of the Vulnerable Software and Affected Versions: PropertyHive versions n/a through 2.0.5 Description: The issue is related to Deserialization of Untrusted Data in PropertyHive. This allows for potential exploitation. No information is provided about the estimated number of potentially...

CVE-2024-23759

CVE-2024-23759 affects Gambio Online Webshop up to version 4.9.2.0 and earlier. The issue is a deserialization of untrusted data in the Parcelshopfinder/AddAddressBookEntry function, enabling remote attackers to execute arbitrary code via an unauthenticated HTTP POST request. Root cause is insecu...

Gambio Code Issue Vulnerability

Gambio is an all-in-one e-commerce solution from Gambio, Inc. A code issue vulnerability exists in Gambio version 4.9.2.0 and earlier, which stems from the system containing deserialization of untrusted data, allowing an attacker to run arbitrary code via the search parameter in...

CVE-2024-23759

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

WordPress Plugin WpEvently Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2024-23759

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

PT-2024-20664 · Unitedthemes · Unitedthemes Brooklyn

Name of the Vulnerable Software and Affected Versions: UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme versions 4.9.7.6 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks. There is no...