CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

CVE-2024-49624 WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in smartdevth Advanced Advertising System advanced-advertising-system allows Object Injection.This issue affects Advanced Advertising System: from n/a through = 1.3.1...

CVE-2024-49624 WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in smartdevth Advanced Advertising System advanced-advertising-system allows Object Injection.This issue affects Advanced Advertising System: from n/a through = 1.3.1...

CVE-2024-49624

CVE-2024-49624: PHP Object Injection in WordPress Advanced Advertising System plugin (

CVE-2024-49625

CVE-2024-49625 describes a deserialization of untrusted data vulnerability in SiteBuilder Dynamic Components (WordPress plugin) allowing PHP Object Injection. Affected: SiteBuilder Dynamic Components versions from n/a through 1.0. CVSS v3.1 vector shows high impact (9.8, CRITICAL) withNETWORK/no ...

CVE-2024-49625 WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

CVE-2024-49626 WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

CVE-2024-49626 WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

CVE-2024-49626

CVE-2024-49626 : Shipyaari Shipping Management plugin (WordPress)

PT-2024-33581 · Unknown · Piyushmca Shipyaari Shipping Management

Name of the Vulnerable Software and Affected Versions: Piyushmca Shipyaari Shipping Management versions 1.2 and earlier Description: The Deserialization of Untrusted Data issue in Piyushmca Shipyaari Shipping Management allows Object Injection. This permits an attacker to inject malicious objects...

PT-2024-33579 · Smartdevth · Smartdevth Advanced Advertising System

Name of the Vulnerable Software and Affected Versions: Smartdevth Advanced Advertising System versions 1.3.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in the Smartdevth Advanced Advertising System. Recommendations: For versio...

PT-2024-33474 · Unknown · Giveaway Boost

Name of the Vulnerable Software and Affected Versions: Giveaway Boost versions n/a through 2.1.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a security problem where an attacker can inject malicious objects into the system...

PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components

Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...

WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Shipyaari Shipping Management versions = 1.2...

WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SiteBuilder Dynamic Components versions = 1.0...

WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Advanced Advertising System versions = 1.3.1...

WordPress WP Easy Post Types plugin <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection vulnerability

Authenticated Subscriber+ PHP Object Injection vulnerability discovered by István Márton in WordPress Plugin Easy Post Types versions = 1.4.4...

CVE-2024-10079

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...

CVE-2024-10079

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...

CVE-2024-10079 WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...