Lucene search
+L
WpdeveloperEssential Blocks Pro

1 matches found

CVE
CVE
added 2023/10/20 6:35 a.m.72 views

CVE-2023-4402

The WordPress Essential Blocks plugin (versions up to and including 4.2.0) is affected by a PHP Object Injection via deserialization of untrusted input in the get_products/get_posts path. The vulnerability allows unauthenticated attackers to inject a PHP Object; exploitation may enable deletion o...

9.8CVSS9.4AI score0.0134EPSS
Save