Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/02/17 10:15 a.m.18 views

CVE-2024-12562

The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2memberproremoteop' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No know...

9.8CVSS9.7AI score0.00949EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/15 9:24 a.m.11 views

CVE-2024-12562 s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2memberproremoteop' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No know...

9.8CVSS7.5AI score0.00949EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/15 9:24 a.m.23 views

CVE-2024-12562 s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2memberproremoteop' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No know...

9.8CVSS0.00949EPSS
SaveExploits0References2
Rows per page
Query Builder