Lucene search
+L

8528 matches found

Cvelist
Cvelist
added 2024/10/23 3:13 p.m.42 views

CVE-2024-49684 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS0.00531EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:13 p.m.20 views

CVE-2024-49684 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/23 3:13 p.m.65 views

CVE-2024-49684

CVE-2024-49684 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin “Backup and Staging by WP Time Capsule” (versions

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.9 views

WordPress plugin Backup and Staging by WP Time Capsule 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

7.2CVSS7.2AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.14 views

PT-2024-33637 · Wp Time Capsule · Backup/Staging By Wp Time Capsule

Name of the Vulnerable Software and Affected Versions: Backup and Staging by WP Time Capsule versions 1.22.21 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.22.21 and earlier, update to a version...

7.2CVSS6.8AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/22 12:00 a.m.14 views

PT-2024-39670 · WordPress · Fluentsmtp

Name of the Vulnerable Software and Affected Versions: FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider versions prior to 2.2.82 Description: The FluentSMTP plugin for WordPress is vulnerable to PHP Object Injection via deserialization of...

10CVSS9.7AI score0.01123EPSS
SaveExploits0References18
Patchstack
Patchstack
added 2024/10/21 9:27 a.m.7 views

WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Backup and Staging by WP Time Capsule versions = 1.22.21...

7.2CVSS7.3AI score0.00531EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:00 a.m.23 views

WordPress Backup and Staging by WP Time Capsule Plugin <= 1.22.21 is vulnerable to PHP Object Injection

Software Backup and Staging by WP Time Capsule Type Plugin Vulnerable versions = 1.22.21 Fixed in 1.22.22 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49684 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 72588c8fb912 Credits Hakiduck Require...

7.2CVSS6.8AI score0.00531EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:00 a.m.8 views

SEOPress Plugin for WordPress < 7.9 PHP Object Injection

The WordPress SEOPress Plugin installed on the remote host is affected by a PHP object injection vulnerability via the deserialization of untrusted input from the 'title' parameter. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

9.8CVSS7.8AI score0.03744EPSS
SaveExploits1References3
OSV
OSV
added 2024/10/20 9:15 a.m.20 views

CVE-2024-49624

Deserialization of Untrusted Data vulnerability in Smartdevth Advanced Advertising System allows Object Injection.This issue affects Advanced Advertising System: from n/a through 1.3.1...

9.8CVSS5.8AI score0.00554EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/20 9:15 a.m.42 views

CVE-2024-49624

Deserialization of Untrusted Data vulnerability in smartdevth Advanced Advertising System advanced-advertising-system allows Object Injection.This issue affects Advanced Advertising System: from n/a through = 1.3.1...

9.8CVSS0.00554EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/20 9:15 a.m.16 views

CVE-2024-49625

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

9.8CVSS0.00528EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 9:15 a.m.9 views

CVE-2024-49625

Deserialization of Untrusted Data vulnerability in Brandon Clark SiteBuilder Dynamic Components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through 1.0...

9.8CVSS5.8AI score0.00528EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/20 9:15 a.m.30 views

CVE-2024-49332

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

9.8CVSS0.00524EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 9:15 a.m.11 views

CVE-2024-49332

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/20 8:15 a.m.37 views

CVE-2024-49626

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

9.8CVSS0.00524EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 8:15 a.m.17 views

CVE-2024-49626

Deserialization of Untrusted Data vulnerability in Piyushmca Shipyaari Shipping Management allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through 1.2...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 8:10 a.m.15 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS9.5AI score0.00524EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/20 8:10 a.m.60 views

CVE-2024-49332

CVE-2024-49332 is a PHP Object Injection vulnerability in WordPress Giveaway Boost plugin (

9.8CVSS5.9AI score0.00524EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/20 8:10 a.m.31 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

9.8CVSS0.00524EPSS
SaveExploits0References1
Rows per page
Query Builder