Lucene search

CVE-2024-3020

🗓️ 10 Apr 2024 04:21:30Reported by WordfenceType

Vulnerability in plugin version 2.6.3 allows PHP Object Injection via 'shortcode' paramete

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
nvd	CVE-2024-3020	10 Apr 202405:15	–	nvd
patchstack	WordPress Carousel, Slider, Gallery by WP Carousel Plugin <= 2.6.3 is vulnerable to PHP Object Injection	11 Apr 202400:00	–	patchstack
cve	CVE-2024-3020	10 Apr 202405:15	–	cve
wpvulndb	Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce < 2.6.4 - Authenticated (Admin+) PHP Object Injection	9 Apr 202400:00	–	wpvulndb
cvelist	CVE-2024-3020	10 Apr 202404:30	–	cvelist
redhatcve	CVE-2024-3020	5 Feb 202510:10	–	redhatcve
wordfence	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)	18 Apr 202415:58	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:shapedplugin:product_slider_for_woocommerce:-:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "shapedplugin",
    "product": "product_slider_for_woocommerce",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.3 ",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:shapedplugin:post_grid\\,_post_carousel\\,_\\&_list_category_posts:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "shapedplugin",
    "product": "post_grid\\,_post_carousel\\,_\\&_list_category_posts",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.3 ",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:shapedplugin:logo_carousel:-:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "shapedplugin",
    "product": "logo_carousel",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.3 ",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3065296/wp-carousel-free/trunk/includes/class-wp-carousel-free-import-export.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d66df15e-1a0a-49e9-bcf9-67091499b24e

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Apr 2024 04:30Current

7.2High risk

Vulners AI Score7.2

CVSS37.2

EPSS0.0187

SSVC