2 matches found
PT-2021-11641
Name of the Vulnerable Software and Affected Versions: food-and-drink-menu plugin through 2.2.0 for WordPress Description: The issue allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm cart cookie in load cart from cookie in...
9.8CVSS0.30798EPSS
SaveExploits1References5
CVE-2020-29045: Deserialization of Untrusted Data
The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdmcart cookie in loadcartfromcookie in includes/class-cart-manager.php...
9.8CVSS6.5AI score0.30798EPSS
SaveExploits1References2
20