8562 matches found
EUVD-2025-19314
Malicious code in bioql PyPI...
CVE-2025-7825
The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...
WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by ? in WordPress Plugin JobSearch versions 3.0.8...
PT-2025-40477
Name of the Vulnerable Software and Affected Versions Schema Plugin For Divi, Gutenberg & Shortcodes versions prior to 4.3.2 Description The Schema Plugin For Divi, Gutenberg & Shortcodes for WordPress is susceptible to Object Instantiation up to version 4.3.2 through deserialization of untrusted...
WordPress plugin The Schema Plugin For Divi, Gutenberg & Shortcodes 安全漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin T...
WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Aiden in WordPress Plugin WooCommerce Vehicle Parts Finder versions = 3.7...
WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by theviper17 in WordPress Plugin Icegram Express Pro versions 5.9.14...
CVE-2025-57919
Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...
CVE-2025-58662
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through = 6.3.5...
CVE-2025-53465
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...
CVE-2025-57321
The CVE-2025-57321 entry concerns magix-combine-ex. A prototype pollution flaw exists in util-deps.addFileDepend, allowing crafted payloads to inject properties into Object.prototype, with the minimum impact described as a DoS. Affected versions are stated as magix-combine-ex through 1.2.10 (and ...
WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme DentiCare versions 1.4.3...
WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by ChuongVN in WordPress Plugin Sign-up Sheets versions = 2.3.2...
WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Goldenblatt versions 1.3.0...
WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Addison versions 1.4.8...
WordPress DentiCare Theme < 1.4.3 is vulnerable to PHP Object Injection
Software DentiCare Type Theme Vulnerable versions 1.4.3 Fixed in 1.4.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-54723 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID c2cef3d0d976 Credits Bonds Required privilege Unauthenticated Publishe...
WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin GSheets Connector versions = 1.1.1...
WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin ConveyThis versions = 269.1...