CVE-2022-4324

The vulnerability CVE-2022-4324 affects the WordPress plugin Custom Field Template prior to version 2.5.8 . The issue arises from unserialising the content of an imported file, which can enable PHP object injection when a high-privilege user imports a malicious Customizer Styling file and a suita...

PT-2019-14314

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.920 Description The issue allows authenticated remote code execution via a crafted object name. This is because the unserialise variable function makes an eval call. It's noted that RPC can be used to run any command...