Lucene search
K

3582 matches found

Patchstack
Patchstack
added 2025/10/21 11:4 a.m.4 views

WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Codiqa versions 1.2.8...

9.8CVSS7.3AI score0.00101EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/19 3:44 a.m.4 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS6.9AI score0.00517EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/19 3:44 a.m.2 views

CVE-2017-20206

The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the wpmudevappointments cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...

9.8CVSS6.9AI score0.00517EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/19 3:44 a.m.4 views

CVE-2017-20208

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 exclusive via deserialization of untrusted input from the isexpiredbydate function. This makes it possible for...

9.8CVSS6.5AI score0.00517EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/18 6:30 a.m.5 views

EUVD-2017-18922

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 exclusive via deserialization of untrusted input from the isexpiredbydate function. This makes it possible for...

9.8CVSS6AI score0.00517EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/18 6:30 a.m.3 views

EUVD-2017-18924

The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the wpmudevappointments cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...

9.8CVSS6.4AI score0.00517EPSS
Exploits0References4
OSV
OSV
added 2025/10/18 4:15 a.m.1 views

CVE-2017-20208

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 exclusive via deserialization of untrusted input from the isexpiredbydate function. This makes it possible for...

9.8CVSS5.8AI score0.00517EPSS
Exploits0References3
NVD
NVD
added 2025/10/18 4:15 a.m.4 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS0.00517EPSS
Exploits0References3
OSV
OSV
added 2025/10/18 4:15 a.m.1 views

CVE-2017-20206

The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the wpmudevappointments cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...

9.8CVSS5.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/18 3:33 a.m.4 views

CVE-2017-20207 Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS6.5AI score0.00517EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/18 12:0 a.m.5 views

PT-2025-42676

Name of the Vulnerable Software and Affected Versions RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress versions prior to 3.7.9.3 Description The RegistrationMagic plugin for WordPress is susceptible to PHP Object Injection due to...

9.8CVSS6.9AI score0.00517EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/10/18 12:0 a.m.1 views

WordPress plugin Appointments 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.3AI score0.00517EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/18 12:0 a.m.3 views

WordPress plugin Flickr Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.3AI score0.00517EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/10/11 12:0 p.m.7 views

WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by ? in WordPress Theme Togo versions 1.0.4...

8.8CVSS7.3AI score0.00118EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/10/10 4:42 a.m.5 views

WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Noisa versions = 2.6.0...

9.8CVSS7.3AI score0.00097EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7730

Malware in sbrugna...

7.2CVSS7AI score0.01057EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-5652

Malware in sbrugna...

7.2CVSS7.7AI score0.02194EPSS
Exploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-6665

Malware in sbrugna...

8.8CVSS8.8AI score0.00595EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-16772

Malware in sbrugna...

8.8CVSS8.7AI score0.00993EPSS
Exploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-10998

Malware in sbrugna...

8.8CVSS8.6AI score0.04371EPSS
Exploits0References3
Rows per page
Query Builder