PT-2024-33093

Name of the Vulnerable Software and Affected Versions ConvertPlus plugin for WordPress versions up to, and including, 3.5.26 Description The issue allows authenticated attackers with contributor-level access and above to inject a PHP Object via deserialization of untrusted input from the settings...

PT-2024-24548 · WordPress · Convertplug

Name of the Vulnerable Software and Affected Versions: ConvertPlug plugin for WordPress versions up to, and including, 3.5.25 Description: The issue concerns PHP Object Injection via deserialization of untrusted input from the settings encoded attribute of the "smile info bar" shortcode. This...