WordPress和WordPress plugin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-27184 · Infigo · Is-Theme-Companion

Name of the Vulnerable Software and Affected Versions: Infigo Software IS-theme-companion versions 1.57 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Object Injection. Recommendations: For Infigo Software IS-theme-companion versions 1.57 and...

PT-2025-27120 · Unknown · Pebas Couponxl

Name of the Vulnerable Software and Affected Versions: pebas CouponXxL versions 3.0.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 3.0.0 and earlier, update to a version that fixes this issue, as n...

WordPress plugin CouponXxL 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-27139 · Unknown · Uxper Nuss

Name of the Vulnerable Software and Affected Versions: uxper Nuss versions 1.3.3 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.3.3 and earlier, update to a version that contains a fix for this...

WordPress plugin IS-theme-companion 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-27138 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions 1.1.3 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.1.3 and earlier, update to a version that fixes this issue, however a...

WordPress plugin Amwerk 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-27115

Name of the Vulnerable Software and Affected Versions: Everest Forms versions through 3.2.2 Description: Deserialization of untrusted data in Everest Forms allows for object injection. This issue impacts installations with PHP versions below 7.1, potentially leading to remote code execution RCE...

PT-2025-27119 · Amwerk · Amwerk

Name of the Vulnerable Software and Affected Versions: Amwerk versions 1.2.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For Amwerk versions 1.2.0 and earlier, at the moment, there is no information about a...

WordPress plugin Nuss 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-27090 · Xtraffic · Wp-Optimize

Name of the Vulnerable Software and Affected Versions: WP Optimize By xTraffic versions through 5.1.6 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions through 5.1.6, update to a version later than 5.1.6 to resolve...

WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Cút lộn xào me in WordPress Theme Red Art versions = 3.8...

WordPress Red Art Theme <= 3.7 is vulnerable to PHP Object Injection

Software Red Art Type Theme Vulnerable versions = 3.7 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52828 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 443adc1cb34f Credits Frank Required privilege Subscriber Published 26 June...

WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds in WordPress Theme Kriya versions = 3.4...

WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds in WordPress Theme VEDA versions = 4.2...

WordPress ThemeMove Core Plugin <= 1.4.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds in WordPress Plugin ThemeMove Core versions = 1.4.2...

WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rau má đậu xanh in WordPress Theme Nuss versions = 1.3.3...

WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rau má đậu xanh in WordPress Theme Sala versions = 1.1.3...

WordPress WP Optimize By xTraffic plugin <= 5.1.6 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by timomangcut in WordPress Plugin WP Optimize By xTraffic versions = 5.1.6...