CVE-2025-24601

Deserialization of Untrusted Data vulnerability in ThimPress FundPress fundpress allows Object Injection.This issue affects FundPress: from n/a through = 2.0.6...

CVE-2025-24601

creationtimestamp| type| source ---|---|--- 2025-01-27 14:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4w5cc4z2h 2025-01-27 14:23:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900769212994777 2025-01-27 14:55:08+00:00| seen|...

CVE-2025-24601

Deserialization of Untrusted Data vulnerability in ThimPress FundPress fundpress allows Object Injection.This issue affects FundPress: from n/a through = 2.0.6...

CVE-2025-24601 WordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThimPress FundPress fundpress allows Object Injection.This issue affects FundPress: from n/a through = 2.0.6...

CVE-2025-24601

CVE-2025-24601 describes a deserialization of untrusted data vulnerability in the WordPress plugin FundPress (affected: versions up to and including 2.0.6). The underlying issue enables PHP object injection via deserialization, with a CVSSv3.1 base score of 9.8 (critical) and network attack vecto...