1 matches found
CVE-2024-10962: Deserialization of Untrusted Data
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replacerowdata' and 'replaceserializedata' functions. This makes it possible for unauthenticated attacke...
8.8CVSS6AI score0.00654EPSS
SaveExploits0References1
20