Lucene search
Robert RWPEX-ID:59D71C12-081B-4357-87E1-E15B23FB750EHistoryApr 27, 2017 - 12:00 a.m.
Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection
2017-04-2700:00:00
Robert R
10
0.002 Low
EPSS
Percentile
59.8%
The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector.
Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin.
The original researcher notified WordPress Plugins team.Related
prion
prion
Design/Logic Flaw
2019-09-10 12:15:00
cve
cve
CVE-2017-18605
2019-09-10 12:15:11
wpvulndb
wpvulndb
Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection
2017-04-27 00:00:00
cvelist
cvelist
CVE-2017-18605
2019-09-10 11:16:21
nvd
nvd
CVE-2017-18605
2019-09-10 12:15:11