8528 matches found
PT-2024-32948 · Gabriele Valenti · Telecash Ricaricaweb
Name of the Vulnerable Software and Affected Versions: Telecash Ricaricaweb versions n/a through 2.2 Description: A Deserialization of Untrusted Data vulnerability is present in Gabriele Valenti's Telecash Ricaricaweb, allowing Object Injection. This issue affects the specified versions of Teleca...
PT-2024-33363 · Innovaweb Sp. Z O.O. · Foter
Name of the Vulnerable Software and Affected Versions: Innovaweb Sp. Z o.O. Free Stock Photos Foter versions 1.5.4 and earlier Description: The issue is related to Deserialization of Untrusted Data, which leads to Object Injection. This allows for potential exploitation. Recommendations: For...
PT-2024-32945 · Boyan Raichev · Ip Loc8
Name of the Vulnerable Software and Affected Versions: Boyan Raichev IP Loc8 versions n/a through 1.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Boyan Raichev IP Loc8. This vulnerability can be exploited due to the deserialization of...
WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin My Reading Library versions = 1.0...
WordPress GiveWP plugin <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability discovered by lefab in WordPress Plugin GiveWP versions = 3.16.3...
WordPress GiveWP Plugin <= 3.16.3 is vulnerable to PHP Object Injection
Software GiveWP Type Plugin Vulnerable versions = 3.16.3 Fixed in 3.16.4 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-9634 Patch priority High CVSS severity High 10 Developer Liquid Web / StellarWP PSID a33794a83e6f Credits lefab Required privilege Unauthenticated...
WordPress My Reading Library Plugin <= 1.0 is vulnerable to PHP Object Injection
Software My Reading Library Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49318 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 404c7fdc5e2d Credits LVT-tholv2k Required privilege...
WordPress plugin GiveWP – Donation Plugin and Fundraising Platform 代码问题漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2024-39731 · WordPress · Givewp
Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to, and including, 3.16.3 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and...
WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Free Stock Photos Foter versions = 1.5.4...
WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin TAKETIN To WP Membership versions = 2.8.17...
WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Recently versions = 1.1...
WordPress Free Stock Photos Foter Plugin <= 1.5.4 is vulnerable to PHP Object Injection
Software Free Stock Photos Foter Type Plugin Vulnerable versions = 1.5.4 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49227 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0e6ee5afeccb Credits LVT-tholv2k Required privilege...
WordPress Recently Plugin <= 1.1 is vulnerable to PHP Object Injection
Software Recently Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49218 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dfdd033e65c6 Credits LVT-tholv2k Required privilege Unauthenticated...
WordPress TAKETIN To WP Membership Plugin <= 2.8.1 is vulnerable to PHP Object Injection
Software TAKETIN To WP Membership Type Plugin Vulnerable versions = 2.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49226 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID e430761eddd4 Credits LVT-tholv2k Required privilege...
CVE-2024-48033
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
CVE-2024-48033 WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
CVE-2024-48033 WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in baptiste.gourdin Talkback talkback-secure-linkback-protocol allows Object Injection.This issue affects Talkback: from n/a through = 1.0...
CVE-2024-48033
CVE-2024-48033 describes a deserialization of untrusted data vulnerability enabling PHP Object Injection in the WordPress Talkback plugin (versions <= 1.0). The affected component is the Talkback secure linkback protocol, with unauthenticated access and a high-impact CVSS of 9.8 (Network, No u...
PT-2024-32951 · Talkback · Talkback
Name of the Vulnerable Software and Affected Versions: Talkback versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Talkback. Recommendations: For versions n/a through 1.0, at the moment, there is no information about a...