Lucene search
K

4 matches found

CVE
CVE
added 2024/06/13 8:31 a.m.52 views

CVE-2024-4371

CVE-2024-4371 applies to the WordPress plugin “CoDesigner – Elementor Addon for WooCommerce” (CoDesigner WooCommerce Builder for Elementor). It describes an unauthenticated PHP Object Injection in versions up to 4.4.1 caused by deserialization of untrusted input from the recently_viewed_products ...

9.8CVSS9.3AI score0.05379EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/04 3:31 a.m.15 views

CVE-2024-3240 ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 via deserialization of untrusted input from the 'settingsencoded' attribute of the 'smileinfobar' shortcode. This makes it possible for authenticated attackers, with...

8.8CVSS9.3AI score0.00704EPSS
Exploits0References2
CVE
CVE
added 2024/05/04 3:31 a.m.50 views

CVE-2024-3240

CVE-2024-3240 affects the ConvertPlug (ConvertPlus) WordPress plugin up to version 3.5.25. It allows authenticated users withContributor+ access to trigger a PHP Object Injection via deserialization of untrusted data in the shortcodes’ settings_encoded attribute of the smile_info_bar element, pot...

8.8CVSS7AI score0.00704EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/27 12:0 a.m.33 views

Google Chrome multiple vulnerabilities - Dec 10(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulndec10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - Dec 10Windows Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networ...

10CVSS0.5AI score0.04266EPSS
Exploits7References5
Rows per page
Query Builder