Lucene search
+L

8597 matches found

Vulnrichment
Vulnrichment
added 2024/12/16 2:31 p.m.19 views

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

9.8CVSS8.6AI score0.00694EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/16 2:31 p.m.28 views

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

9.8CVSS0.00694EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 2:31 p.m.58 views

CVE-2024-54367

CVE-2024-54367 affects ForumWP (ForumWP) up to version 2.1.0. Deserialization of untrusted data enables PHP object injection (unauthenticated). The Red Hat/Wordfence entries indicate the issue is acknowledged and patched in 2.1.0; remediation is to upgrade to the patched version (2.1.0) or later.

9.8CVSS7.2AI score0.00694EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.9 views

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in PlexTrac version 1.61.3 through versions prior to 2.8.1, which stems from the presence of an untrusted data deserialization vulnerability that allows object...

9.8CVSS7.2AI score0.00647EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.11 views

PT-2024-36253 · Forumwp · Forumwp

Name of the Vulnerable Software and Affected Versions: ForumWP versions 2.1.0 and earlier Description: The issue is related to the deserialization of untrusted data, allowing object injection. This can potentially lead to security breaches. Recommendations: For versions 2.1.0 and earlier, update ...

9.8CVSS7.7AI score0.00694EPSS
SaveExploits0References5
NVD
NVD
added 2024/12/13 3:15 p.m.9 views

CVE-2024-54282

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through = 1.4.2...

7.2CVSS0.0081EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.12 views

CVE-2024-54273

Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through = 1.0.14...

9.8CVSS0.00687EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:25 p.m.38 views

CVE-2024-54282 WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through = 1.4.2...

7.2CVSS0.0081EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:25 p.m.53 views

CVE-2024-54282

CVE-2024-54282 is a Deserialization of Untrusted Data vulnerability in WP Mega Menu (Themeum). The connected RH/Wordfence entries show an Authenticated (Administrator+) PHP Object Injection via deserialization affecting WP Mega Menu versions up to 1.4.2. Remediation is to upgrade to a non-affecte...

7.2CVSS7.2AI score0.0081EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:25 p.m.11 views

CVE-2024-54282 WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu allows Object Injection.This issue affects WP Mega Menu: from n/a through 1.4.2...

7.2CVSS6.9AI score0.0081EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.42 views

CVE-2024-54273

CVE-2024-54273: Mail Picker’s Deserialization of Untrusted Data leads to Object Injection in Mail Picker versions up to 1.0.14. CVSS v3.1 base score 9.8 (CRITICAL); impact on confidentiality, integrity, availability HIGH. Root cause is deserialization of untrusted data in the plugin. Remediation:...

9.8CVSS7.2AI score0.00687EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.10 views

CVE-2024-54273 WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker allows Object Injection.This issue affects Mail Picker: from n/a through 1.0.14...

9.8CVSS6.9AI score0.00687EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.24 views

CVE-2024-54273 WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through = 1.0.14...

9.8CVSS0.00687EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/13 6:15 a.m.8 views

CVE-2024-11839

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

7.5CVSS5.9AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 6:15 a.m.30 views

CVE-2024-11839

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

8.6CVSS0.00349EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 5:51 a.m.14 views

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

8.6CVSS7.4AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 5:51 a.m.54 views

CVE-2024-11839

CVE-2024-11839 affects PlexTrac, specifically the Runbooks modules, where deserialization of untrusted data enables object injection and arbitrary file writes. Affected versions are PlexTrac 1.61.3 through before 2.8.1. The issue is a server-side deserialization flaw with network exposure and no ...

8.6CVSS7.1AI score0.00349EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/13 5:51 a.m.27 views

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

8.6CVSS0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.10 views

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1 that stems from an untrustworthy data deserialization vulnerability in the Runbook module, which allows obje...

8.6CVSS7.2AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.6 views

PT-2024-36154 · Pickplugins · Pickplugins Mail Picker

Name of the Vulnerable Software and Affected Versions: PickPlugins Mail Picker versions 1.0.14 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For PickPlugins Mail Picker versions 1.0.14 and earlier, at the moment...

9.8CVSS6.8AI score0.00687EPSS
SaveExploits0References3
Rows per page
Query Builder