Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadFieldMatch method. The issue results from the lack of proper validation of user-supplied dat...

CVE-2024-43354

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43242

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6...

CVE-2024-43242

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

CVE-2024-43252 WordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through = 1.1.1...

CVE-2024-43242

CVE-2024-43242 is a deserialization vulnerability in azzaroco Ultimate Membership Pro (affecting

CVE-2024-37099

CVE-2024-37099 affects WordPress GiveWP plugin versions n/a through 3.14.1. The issue is an unauthenticated PHP Object Injection via deserialization of untrusted data in GiveWP, enabling potential remote code execution. Patch 3.14.2 fixes the vulnerability. Vendor: Liquid Web / StellarWP. Current...

WordPress plugin GiveWP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress plugin myCred 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-30414 · Crew Hrm · Crew Hrm

Name of the Vulnerable Software and Affected Versions: Crew HRM versions n/a through 1.1.1 Description: The Deserialization of Untrusted Data issue in Crew HRM allows Object Injection. This problem affects Crew HRM, enabling potential exploitation. Recommendations: For Crew HRM versions n/a throu...

PT-2024-27297 · Liquid Web · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP versions n/a through 3.14.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Liquid Web GiveWP. Recommendations: For versions n/a through 3.14.1, update to a version later than...

WordPress plugin Ultimate Membership Pro 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-30522 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions n/a through 2.7.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in myCred. Recommendations: For versions n/a through 2.7.2, update to a version later than 2.7.2 to resolv...

VulnCheck KEV: CVE-2024-43354

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution...

CVE-2024-43141 WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...

CVE-2024-43141

CVE-2024-43141 affects the WordPress plugin Participants Database . The advisory describes a Deserialization of Untrusted Data vulnerability that allows Object Injection in versions up to 2.5.9.2 (patched in 2.5.9.2). CVSS metrics indicate a critical severity (3.1, base score 9.8) with network at...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-21586)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from a remote code execution vulnerability that is caused by a lack of proper validation of user-supplied data, which could lead to deserialization of...

WordPress plugin Participants Database 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

PT-2024-7360 · Unknown · Ultimate Membership Pro

Name of the Vulnerable Software and Affected Versions: Ultimate Membership Pro versions n/a through 12.6 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remote attacker to execute arbitrary code. The...