CVE-2024-13777: Deserialization of Untrusted Data

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unauthenticated attackers to inject a PHP...

PT-2025-9807

Name of the Vulnerable Software and Affected Versions ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress versions up to, and including, 6.91 Description The issue is related to PHP Object Injection via deserialization of untrusted input from the margs parameter. This allo...