5355 matches found
WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin VK Google Job Posting Manager versions = 1.3.1...
WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Spell Check versions = 12.1...
WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Event Planner versions = 1.5.7...
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sunshine Photo Cart versions = 3.7.1...
WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Ultimate Exporter versions = 3.0...
WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Feed PRO for WooCommerce versions = 13.5.7...
WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pay with Vipps for WooCommerce versions = 6.2.0...
WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Peter Tang in WordPress Plugin Advanced Post Manager versions = 4.5.5...
HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892
Este tipo de ataque intenta explotar el proceso de deserialización de la aplicación PHP para ejecutar código arbitrario o llevar a cabo acciones no deseadas en el servidor. Estrategias de Mitigación Para defenderse contra la inyección de objetos PHP y ataques similares, considere las siguientes...
CVE-2024-52430
CVE-2024-52430 Lis Video Gallery = 0.2.1 - Inyección de Objetos PHP no Autenticada Descripción El plugin Lis Video Gallery para WordPress es vulnerable a la Inyección de Objetos PHP en versiones hasta la 0.2.1 inclusive, a través de la deserialización de entrada no confiable. Esto permite que...
CVE-2024-50507
CVE-2024-50507 DS.DownloadList = 1.3 - Inyección de Objetos PHP sin Autenticación Descripción El plugin DS.DownloadList para WordPress es vulnerable a la Inyección de Objetos PHP en todas las versiones hasta la 1.3 inclusive, a través de la deserialización de entrada no confiable. Esto permite qu...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ayukiab in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.19...
WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by nakko in WordPress Plugin The Events Calendar versions = 6.17.4...
CVE-2026-97284
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-97284
The WordPress Icegram plugin (versions
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...