CVE-2025-53584

CVE-2025-53584 affects the WordPress plugin WP Ticket Customer Service Software & Support Ticket System (versions up to 6.0.2). The issue is a PHP Object Injection caused by deserialization of untrusted data. CVSS v3.1 base score 8.1 (High) with network attack vector and no user interaction. Word...

CVE-2025-53583

CVE-2025-53583 affects the WordPress Employee Spotlight plugin (versions n/a–5.1.1). It is a PHP Object Injection vulnerability caused by deserialization of untrusted data in Employee Spotlight. The entry is marked as Patched; remediation is to upgrade to a fixed version (≥5.1.1 or later) where t...

CVE-2025-53584 WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Object Injection.This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through = 6.0.2...

CVE-2025-53572 WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injection.This issue affects WP Easy Contact: from n/a through = 4.0.1...

CVE-2025-53572

CVE-2025-53572: Deserialization of untrusted data in the WordPress plugin WP Easy Contact (emarket-design) allows PHP object injection in version &lt;= 4.0.1. Affected: WP Easy Contact

CVE-2025-53572 WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injection.This issue affects WP Easy Contact: from n/a through = 4.0.1...

CVE-2025-53243 WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Plugin for WordPress employee-directory allows Object Injection.This issue affects Employee Directory – Staff Listing & Team Directory Plugin for WordPress: from n/a through = 4.5...

CVE-2025-53243

Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Plugin for WordPress employee-directory allows Object Injection.This issue affects Employee Directory – Staff Listing & Team Directory Plugin for WordPress: from n/a through = 4.5...

CVE-2025-53243

CVE-2025-53243 affects the WordPress plugin Employee Directory – Staff Listing & Team Directory (versions up to 4.5.3). It is a PHP Object Injection via deserialization of untrusted data, enabling potential total compromise with network access, no user interaction, and high confidentiality/integr...

CVE-2025-53243 WordPress Employee Directory – Staff Listing & Team Directory Plugin for WordPress Plugin <= 4.5.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Plugin for WordPress allows Object Injection. This issue affects Employee Directory – Staff Listing & Team Directory Plugin for WordPress: from n/a through 4.5.3...

CVE-2025-52761 WordPress WP Funnel Manager plugin <= 1.4.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel Manager: from n/a through = 1.4.0...

CVE-2025-52761

CVE-2025-52761 affects WP Funnel Manager (WordPress plugin) up to version 1.4.0. The issue is described as Deserialization of Untrusted Data leading to PHP Object Injection. Public documentation shows a high-severity vector (CVSS v3.1: 9.8, Network/No user interaction) and notes that, at least in...

CVE-2025-52761 WordPress WP Funnel Manager Plugin <= 1.4.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel Manager: from n/a through = 1.4.0...

WordPress plugin Employee Spotlight 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2025-35078

Name of the Vulnerable Software and Affected Versions: WpEvently versions through 4.4.8 Description: Deserialization of untrusted data in WpEvently allows for object injection. Recommendations: Update WpEvently to a version later than 4.4.8...

WordPress plugin Employee Directory – Staff Listing & Team Directory Plugin for WordPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2025-35065

Name of the Vulnerable Software and Affected Versions: WP Ticket Customer Service Software & Support Ticket System versions through 6.0.2 Description: Deserialization of untrusted data in the software allows for object injection. Recommendations: Update WP Ticket Customer Service Software & Suppo...

PT-2025-35060

Name of the Vulnerable Software and Affected Versions: WP Easy Contact versions through 4.0.1 Description: Deserialization of untrusted data in WP Easy Contact allows for object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-35041

Name of the Vulnerable Software and Affected Versions: WP Funnel Manager versions through 1.4.0 Description: Deserialization of untrusted data in WP Funnel Manager allows for object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

PT-2025-35074

Name of the Vulnerable Software and Affected Versions: YouTube Showcase versions through 3.5.1 Description: An improper control of generation of code 'Code Injection' vulnerability exists in emarket-design YouTube Showcase, allowing Object Injection. Recommendations: Update YouTube Showcase to a...