CVE-2024-13410

creationtimestamp| type| source ---|---|--- 2025-03-19 07:34:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2d4et26 2025-03-19 07:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpol2gbfw24 2025-03-19 07:49:36+00:00| seen|...

CVE-2024-13410 CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler

The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajaxhandler' function. This makes it possible for...

CVE-2024-13410

CVE-2024-13410 affects CozyStay &lt;= 1.7.0 and TinySalt