CWE-502Vulnerability type
WordPress PHP Object Injection vulnerabilities (page 1272)
unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Reflected Cross-Site Scripting
directories
<1.3.46Update to 1.3.46
- Medium6.1Reflected Cross-Site Scripting via font-size
Page Builder: Pagelayer – Drag and Drop website builder
<1.3.5Update to 1.3.5
- Medium6.1Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
directories
<1.3.46Update to 1.3.46
- Medium6.1Reflected Cross-Site Scripting via Color Settings
Page Builder: Pagelayer – Drag and Drop website builder
<1.3.5Update to 1.3.5
- Medium5.3Improper Access Control
DiveBook
≤1.1.4No patch available
- Medium6.5Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.1.13Update to 2.1.13
- Critical9.8Remote Code Execution
WP Hotel Booking
≤1.10.3Update to 1.10.4
- High8.1Sensitive Information Disclosure
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more
≤1.4.2Update to 1.4.3
- Medium5.4Authenticated Stored Cross-Site Scripting
Themify Portfolio Post
≤1.1.5Update to 1.1.6
- High8.3Blind Server-Side Request Forgery via detail.php
Canto
≤1.9.0Update to 2.0.1
- High8.3Blind Server-Side Request Forgery via download.php
Canto
≤1.9.0Update to 2.0.1
- Medium6.1Reflected Cross-Site Scripting
EventON (Pro) - WordPress Virtual Event Calendar Plugin
≤3.0.5Update to 3.0.6
- Medium6.3Missing Authorization on Various AJAX Actions
NEX-Forms – Ultimate Forms Plugin for WordPress
≤7.7.1Update to 7.8
- Medium6.4Unrestricted SVG Uploads
Elementor Website Builder – more than just a page builder
≤3.0.13Update to 3.0.14
- High7.2Authenticated SQL Injection via Orderby
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
≤4.1.4Update to 4.1.5
- Critical9.9Authenticated Privilege Escalation
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
<2.10.3Update to 2.10.3
- High8.8Remote Code Execution
Secure File Manager
<2.8.2Update to 2.8.2
- High7.2Authenticated SQL Injection
Anti-Spam, Spam FireWall by CleanTalk
<5.149Update to 5.149
- High8.8CSV Injection
Easy Registration Forms
≤2.0.6No patch available
- High7.3CSV injection via a customer's profile
Import and export users and customers
≤1.16.3.5Update to 1.16.3.6
- Critical9.8Unauthenticated Arbitrary File Upload
AIT CSV import/export
≤3.0.3Update to 3.0.4
- Critical9.8Unauthenticated SQL Injection
Good LMS - Learning Management System WP Plugin
≤2.1.4Update to 2.1.5
- Critical9.8PHP Object Injection
Ultimate Reviews
<2.1.33Update to 2.1.33
- Critical10.0Unauthenticated Privilege Escalation via User Roles
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.1.12Update to 2.1.12
- Critical10.0Unauthenticated Privilege Escalation via User Meta
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.1.12Update to 2.1.12
- Critical9.9Authenticated Privilege Escalation via Profile Update
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.1.12Update to 2.1.12
- High7.5PHP Object Injection
Welcart e-Commerce
<1.9.36Update to 1.9.36
- Critical9.8PHP Object Injection
GDPR CCPA Compliance & Cookie Consent Banner
≤2.3Update to 2.4
- Critical9.8Remote Code Execution
Simple File List
<4.2.3Update to 4.2.3
- High8.8Author+ SQL Injection
AccessPress Social Icons
<1.8.1Update to 1.8.1