8529 matches found
WordPress plugin Welcart e-Commerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-33978 · Thememakers · Visual Content Composer
Name of the Vulnerable Software and Affected Versions: ThemeMakers Visual Content Composer versions through 1.5.8 Description: ThemeMakers Visual Content Composer is susceptible to object injection due to the deserialization of untrusted data. Recommendations: Update ThemeMakers Visual Content...
PT-2025-34016 · Unknown · Groundhogg
Name of the Vulnerable Software and Affected Versions: Groundhogg versions through 4.2.2 Description: Deserialization of untrusted data in Groundhogg allows object injection. Recommendations: Update Groundhogg to a version later than 4.2.2...
PT-2025-33894
Name of the Vulnerable Software and Affected Versions: Redirection for Contact Form 7 plugin for WordPress versions up to and including 3.2.4 Description: The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted input in the ge...
WordPress plugin Redirection for Contact Form 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2025-34000 · Quanticalabs · Quanticalabs Medicenter
Name of the Vulnerable Software and Affected Versions: QuanticaLabs MediCenter - Health Medical Clinic versions n/a through 15.1 Description: The software contains a deserialization of untrusted data issue, which allows for object injection. Recommendations: Versions prior to 15.1 should be...
PT-2025-33999 · Unknown · Welcart E-Commerce
Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions through 2.11.16 Description: A deserialization of untrusted data issue exists in Welcart e-Commerce, allowing for object injection. Recommendations: Update Welcart e-Commerce to a version later than 2.11.16...
PT-2025-33997 · WordPress · Gutenberg Blocks +1
Name of the Vulnerable Software and Affected Versions: PickPlugins Post Grid and Gutenberg Blocks versions through 2.3.11 Description: Deserialization of untrusted data in PickPlugins Post Grid and Gutenberg Blocks allows for object injection. Recommendations: Versions prior to 2.3.11 are affecte...
WordPress plugin Post Grid and Gutenberg Blocks 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
WordPress plugin Groundhogg 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Redirection for Contact Form 7 plugin <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability
Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Redirection for Contact Form 7 versions = 3.2.4...
WordPress Redirection for Contact Form 7 plugin <= 3.2.4 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Redirection for Contact Form 7 versions = 3.2.4...
WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Bonds in WordPress Plugin ThemeMakers Visual Content Composer versions = 1.5.8...
WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme BugsPatrol versions = 1.5.0...
WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme White Rabbit versions = 1.5.2...
CVE-2025-49895
Cross-Site Request Forgery CSRF vulnerability in iThemes ServerBuddy by PluginBuddy.Com allows Object Injection.This issue affects ServerBuddy by PluginBuddy.Com: from n/a through 1.0.5...
Linux Distros Unpatched Vulnerability : CVE-2019-14466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GOsaFilterSettings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file...
WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin Simple Login Log versions = 1.1.3...