CVE-2024-50507

CVE-2024-50507 DS.DownloadList = 1.3 - 未认证的PHP对象注入 描述 WordPress的DS.DownloadList插件在所有版本（包括1.3）中，由于对不受信任的输入进行反序列化，存在PHP对象注入漏洞。这使得未认证的攻击者能够注入一个PHP对象。受影响软件中不存在已知的POP链。如果目标系统上安装了其他插件或主题而存在POP链，则可能允许攻击者删除任意文件、获取敏感数据或执行代码。 详情 类型 ：插件 插件标识 ：dsdownloadlist 受影响版本 ：1.3 CVSS评分 ：8.1 CVSS等级 ：高 CVSS向量...

CVE-2024-50507

Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through = 1.3...

CVE-2024-50507 WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through = 1.3...

CVE-2024-50507 WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through = 1.3...

CVE-2024-50507

The CVE-2024-50507 entry applies to WordPress plugin DS.DownloadList (versions ≤ 1.3). Affected component: PHP object deserialization in DS.DownloadList leading to Object Injection. Impact described as high severity under CVSS 3.1 (score 9.8) with unauthenticated exploitation and full impact on c...

WordPress plugin DS.DownloadList 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin DS.DownloadList versions = 1.3...

WordPress DS.DownloadList Plugin <= 1.3 is vulnerable to PHP Object Injection

Software DS.DownloadList Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-50507 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 98ea8810e98b Credits Mika Required privilege Unauthenticated...