EUVD-2017-9718

Malware in sbrugna...

CVE-2017-18605

The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...

Design/Logic Flaw

The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...

CVE-2017-18605

CVE-2017-18605 affects the gravitate-qa-tracker WordPress plugin up to version 1.2.1, which is vulnerable to PHP Object Injection due to insecure handling of serialized data. Exploitation is reported to be possible over HTTP requests (unauthenticated), enabling object-injection-based impact. Othe...

CVE-2017-18605: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...

PT-2019-8536

Name of the Vulnerable Software and Affected Versions gravitate-qa-tracker plugin versions 1.2.1 and earlier Description The issue concerns PHP Object Injection in the gravitate-qa-tracker plugin for WordPress. Recommendations For versions 1.2.1 and earlier, update to a version that fixes the PHP...

Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection

The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. PoC Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin. The original...

Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection

The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin. The original researcher...