Lucene search
+L

8687 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.15 views

WordPress plugin Events Calendar for GeoDirectory 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

8.8CVSS8.8AI score0.00661EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

WordPress plugin ProfileGrid 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS8.9AI score0.00678EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.8 views

WordPress plugin Assistant 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.2CVSS8.8AI score0.00679EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.14 views

PT-2025-9474

Name of the Vulnerable Software and Affected Versions Brent Jett Assistant versions 1.5.1 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations For versions 1.5.1 and earlier, update to a version that contains a fix for...

7.2CVSS5.8AI score0.00679EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/03/02 8:27 a.m.13 views

CVE-2024-13831

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

7.2CVSS7.2AI score0.00584EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/01 12:15 p.m.12 views

CVE-2024-13833

The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject ...

7.2CVSS0.00624EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/01 11:22 a.m.17 views

CVE-2024-13833 Album Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta

The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject ...

7.2CVSS0.00624EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/01 11:22 a.m.5 views

CVE-2024-13833 Album Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta

The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject ...

7.2CVSS7.2AI score0.00624EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/01 11:22 a.m.60 views

CVE-2024-13833

CVE-2024-13833: Album Gallery – WordPress Gallery plugin vulnerable to authenticated PHP Object Injection via gallery meta in all versions

7.2CVSS7.5AI score0.00624EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/03/01 12:08 a.m.6 views

WordPress Album Gallery – WordPress Gallery plugin <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta vulnerability

Authenticated Editor+ PHP Object Injection via Gallery Meta vulnerability discovered by Francesco Carlucci in WordPress Plugin Album Gallery – WordPress Gallery versions = 1.6.3...

7.2CVSS7.3AI score0.00624EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.9 views

WordPress plugin Album Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

7.2CVSS8.4AI score0.00624EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/28 9:15 a.m.12 views

CVE-2024-13831

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

7.2CVSS0.00584EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/28 9:15 a.m.5 views

CVE-2024-13831

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

7.2CVSS6AI score0.00584EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/28 8:23 a.m.24 views

CVE-2024-13831 Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

7.2CVSS0.00584EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/28 8:23 a.m.10 views

CVE-2024-13831 Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

7.2CVSS7.2AI score0.00584EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/28 8:23 a.m.59 views

CVE-2024-13831

CVE-2024-13831 concerns Tabs for WooCommerce (WordPress)

7.2CVSS7.2AI score0.00584EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.9 views

WordPress plugin Tabs for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS8.4AI score0.00584EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/27 11:50 p.m.9 views

WordPress Tabs for WooCommerce plugin <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs vulnerability

Authentiated Shop Manager+ PHP Object Injection in producthascustomtabs vulnerability discovered by Francesco Carlucci in WordPress Plugin Tabs for WooCommerce versions = 1.0.0...

7.2CVSS7.3AI score0.00584EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/27 2:25 p.m.19 views

CVE-2025-26900

Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through = 3.14.27...

9.8CVSS7.2AI score0.00592EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/26 3:26 p.m.23 views

CVE-2025-27300

Deserialization of Untrusted Data vulnerability in giuliopanda ADFO admin-form allows Object Injection.This issue affects ADFO: from n/a through = 1.9.1...

7.2CVSS7.2AI score0.00644EPSS
SaveExploits0References1
Rows per page
Query Builder