Lucene search
+L

4 matches found

NVD
NVD
added 2025/03/05 10:15 a.m.7 views

CVE-2024-13777

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP...

9.8CVSS0.00587EPSS
SaveExploits0References2
Circl
Circl
added 2025/03/05 9:36 a.m.6 views

CVE-2024-13777

creationtimestamp| type| source ---|---|--- 2025-03-05 09:36:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6529 2025-03-05 11:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyhgb6x2u 2025-03-05 12:46:01+00:00| seen| https://t.me/cvedetector/19619 2025-03-06...

9.8CVSS8.7AI score0.00587EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/05 9:21 a.m.5 views

CVE-2024-13777 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP...

8.1CVSS7.8AI score0.00587EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/05 9:21 a.m.15 views

CVE-2024-13777 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP...

8.1CVSS0.00587EPSS
SaveExploits0References2
Rows per page
Query Builder