8513 matches found
WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin ConveyThis versions = 269.1...
CVE-2025-58662
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through = 6.3.5...
CVE-2025-58244
Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...
CVE-2025-57919
Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...
CVE-2025-53465
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...
CVE-2025-53465 WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...
CVE-2025-53465 WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector allows Object Injection. This issue affects GSheets Connector: from n/a through 1.1.1...
CVE-2025-53465
CVE-2025-53465 describes a deserialization of untrusted data vulnerability in the raoinfotech GSheets Connector. This allows Object Injection and affects the GSheets Connector versions from n/a through 1.1.1. The CVSS 3.1 base score is 7.2 (High) with network attack vector, low attack complexity,...
CVE-2025-57919
CVE-2025-57919 is a deserialization/ PHP Object Injection vulnerability in Translate WordPress with ConveyThis (WordPress ConveyThis Language Translate Widget), affecting the ConveyThis translation widget up to version 266. The CIRCL sighting confirms an authenticated (Administrator+) PHP Object ...
CVE-2025-57919 WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...
CVE-2025-57919 WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...
CVE-2025-58244
CVE-2025-58244 (Constructo) is a CSRF-related vulnerability in the Constructo WordPress theme that, per the provided documents, allows object injection. Affected software ranges to Constructo versions up to 4.3.9. The CVE description and related references (including Wordfence summaries) confirm ...
CVE-2025-58244 WordPress Constructo Theme <= 4.3.9 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...
CVE-2025-58244 WordPress Constructo Theme <= 4.3.9 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...
CVE-2025-58662
CVE-2025-58662 (Awesome Support, WordPress) Deserialization of untrusted data in the Awesome Support plugin can lead to PHP object injection. The vulnerability affects versions up to 6.3.4 (per initial description) and is corroborated in vulnerability databases with the same CVE. According to pat...
CVE-2025-58662 WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through = 6.3.5...
CVE-2025-58662 WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through = 6.3.5...
WordPress plugin Awesome Support 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...
PT-2025-39001
Name of the Vulnerable Software and Affected Versions raoinfotech GSheets Connector versions through 1.1.1 Description A flaw exists in raoinfotech GSheets Connector that allows for Object Injection due to deserialization of untrusted data. This issue impacts the application's ability to securely...
WordPress plugin GSheets Connector 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...