CVE-2025-22510

CVE-2025-22510 1️⃣ 구성 요소 유형 WordPress 플러그인 2️⃣ 구성 요소 세부 정보 구성 요소 이름 WC Price History for Omnibus 취약한 버전 이 플러그인을 활성화하려면 WooCommerce 플러그인이 먼저 설치 및 활성화되어 있어야 합니다. 2. PHP 객체 주입 취약점을 테스트하려면 wp-config.php 파일 맨 아래에 다음 클래스 PoCPOPChainObject를 추가합니다. class PoCPOPChainObject public $message = ""; public...

CVE-2025-22510

Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through = 2.1.4...

CVE-2025-22510

Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through = 2.1.4...

CVE-2025-22510 WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Konrad Karpieszuk WC Price History for Omnibus allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through 2.1.4...

CVE-2025-22510: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through = 2.1.4...

Exploit for CVE-2025-22510

CVE-2025-22510 1️⃣ Component type WordPress plugin 2️...

CVE-2024-12617

The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and...

CVE-2024-12617

CVE-2024-12617 affects WC Price History for Omnibus (WordPress). The issue is a missing capability check on several AJAX actions, permitting authenticated users with Subscriber level and above to view and modify history data. This is confirmed by Red Hat/Wordfence references noting the WC Price H...

CVE-2024-12617 WC Price History for Omnibus <= 2.1.3 - Missing Authorization

The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and...

PT-2024-17675 · WordPress · Wc Price History For Omnibus

Name of the Vulnerable Software and Affected Versions: WC Price History for Omnibus plugin for WordPress versions up to, and including, 2.1.3 Description: The issue is related to unauthorized access due to a missing capability check on several AJAX actions. This allows authenticated attackers wit...

CVE-2024-12617: Missing Authorization

The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and...