WordPress plugin Crafts & Arts 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2025-22670 · Themeton · Themeton Dash

Name of the Vulnerable Software and Affected Versions: themeton Dash versions 1.3 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For themeton Dash versions 1.3 and earlier, at the moment, there is no information...

PT-2025-22705 · Boldthemes · Boldthemes Avantage

Name of the Vulnerable Software and Affected Versions: BoldThemes Avantage versions 2.4.6 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.4.6 and earlier, update to a version later than 2.4.6 to...

WordPress plugin CoinPayments.net Payment Gateway for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability exists ...

PT-2025-22757 · Unknown · Zoomit Zoomsounds

Name of the Vulnerable Software and Affected Versions: ZoomIt ZoomSounds versions n/a through 6.91 Description: The issue is related to the deserialization of untrusted data, which allows object injection in ZoomIt ZoomSounds. Recommendations: For ZoomIt ZoomSounds versions n/a through 6.91, upda...

WordPress plugin AncoraThemes Umberto 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress plugin Acerola 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-22701 · WordPress · Grand Tour

Name of the Vulnerable Software and Affected Versions: Grand Tour | Travel Agency WordPress versions through 5.5.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited by injecting malicious objects into the...

PT-2025-22694 · WordPress · Ancorathemes Jarvis

Name of the Vulnerable Software and Affected Versions: AncoraThemes Jarvis – Night Club, Concert, Festival WordPress versions 1.8.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.8.11 and earlier,...

PT-2025-22690 · Designthemes · Designthemes Pet World

Name of the Vulnerable Software and Affected Versions: designthemes Pet World versions n/a through 2.8 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches by injecting malicious objects into the...

WordPress plugin Dash 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

WordPress plugin Fish House 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2025-22678 · Unknown · Themeton The Business

Name of the Vulnerable Software and Affected Versions: themeton The Business versions 1.6.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For themeton The Business versions 1.6.1 and earlier, at the moment, ther...

PT-2025-22753 · Woocommerce · Coinpayments.Net Payment Gateway For Woocommerce

Name of the Vulnerable Software and Affected Versions: CoinPayments.net Payment Gateway for WooCommerce versions 1.0.0 through 1.0.17 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can be exploited due to the deserialization of untruste...

WordPress plugin Kids Planet 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2022-4323

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

CVE-2022-4265

The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object...

CVE-2022-4120

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadge...

CVE-2022-4043

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

CVE-2022-3900

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipeargs parameter before unserializing it in the cookedloadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability...