11 matches found
CVE-2024-56059
CVE-2024-56059 Partners = 0.2.0 - 未认证的PHP对象注入 描述 WordPress的Partners插件在版本0.2.0及以下版本中,由于通过反序列化不可信输入,存在PHP对象注入漏洞。这使得未经认证的攻击者能够注入一个PHP对象。受影响软件中不存在已知的POP链。如果目标系统上安装了额外的插件或主题而存在POP链,则可能允许攻击者删除任意文件、获取敏感数据或执行代码。 详情 类型 : plugin 插件标识 : partners 受影响版本 : 0.2.0 CVSS评分 : 9.8 CVSS评级 : 严重 CVSS向量 :...
CVE-2025-22751 WordPress Partners Plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farinspace Partners partners allows Reflected XSS.This issue affects Partners: from n/a through = 0.2.0...
CVE-2025-22751 WordPress Partners Plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mighty Digital Partners allows Reflected XSS.This issue affects Partners: from n/a through 0.2.0...
CVE-2025-22751
CVE-2025-22751 is a Reflected XSS in the WordPress plugin Partners (Mighty Digital Partners) affecting Partners: from n/a through 0.2.0. Root cause: improper neutralization of input during web page generation. Impact: Reflected XSS; no exploit details or likelihood are provided in the connected d...
WordPress plugin Partners 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Partners Plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Partners versions = 0.2.0...
CVE-2024-56059 WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in farinspace Partners partners allows Object Injection.This issue affects Partners: from n/a through = 0.2.0...
CVE-2024-56059
CVE-2024-56059: WordPress Partners plugin (versions
CVE-2024-56059 WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mighty Digital Partners allows Object Injection.This issue affects Partners: from n/a through 0.2.0...
WordPress plugin Partners 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Partners versions = 0.2.0...