Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3,935

Export CSV
CVE-2024-30227

WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects Geo Controller: from n/a through 8.6.4.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-30226

WordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Wpdeveloper
Products
Betterdocs
CVE-2024-30228

WordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects Hercules Core : from n/a through 6.4.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Wordpress
Products
Wordpress
CVE-2024-30225

WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WPENGINE, INC. WP Migrate.This issue affects WP Migrate: from n/a through 2.6.10.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Wpengine
Products
Wp Migrate
CVE-2024-30223

WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Reputeinfosystems
Products
Armember
CVE-2024-30224

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Wholesale Team Wpxpo
Products
Wholesalex Wholesalex
CVE-2024-30222

WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Reputeinfosystems
Products
Armember
CVE-2024-29800

WordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Wordpress
Products
Wordpress
CVE-2024-2721

WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Sygnoos
Products
Social Media Share Buttons
CVE-2024-24842

WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 11.30.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.30.2.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2024-24796

WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Mage-people
Products
Event Manager And Tickets Selling For Woocommerce
CVE-2024-24797

WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
G5plus
Products
Ere Recently Viewed
CVE-2024-23512

WordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in wpxpo ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks.This issue affects ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks: from n/a through 3.1.4.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Wpxpo
Products
Wowstore
CVE-2024-23513

WordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.5.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Wp-property-hive
Products
Propertyhive
CVE-2024-22309

WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Quantumcloud
Products
Wpbot
CVE-2023-52225

WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Taggbox
Products
Taggbox
CVE-2023-52218

WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Antonbond
Products
Woocommerce Tranzila Payment Gateway
CVE-2023-52219

WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Gecka Gecka Terms Thumbnails.This issue affects Gecka Terms Thumbnails: from n/a through 1.1.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Gecka
Products
Terms Thumbnails