VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-502Vulnerability type

WordPress PHP Object Injection vulnerabilities (page 1315)

unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress PHP Object Injection vulnerabilities (page 1315)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Stored Cross-Site Scripting
Contact Form Plugin≤4.0.1Update to 4.0.2
CVE-2017-20055—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
User Login Log≤2.2.2No patch available
CVE-2017-20056—
High8.8Cross-Site Request Forgery
Global Content Blocks≤2.1.5No patch available
CVE-2017-20090—
Medium6.1Cross-Site Scripting
Contact Form Manager≤1.4.3Update to 1.4.4
CVE-2017-20054—
High8.8Cross-Site Request Forgery
Contact Form Manager≤1.4.3Update to 1.4.4
CVE-2017-20053—
Critical9.8Arbitrary File Upload
webapp-builder≤2.0No patch available
CVE-2017-1002002—
Medium5.3Missing Authorization
How to Create an App for Android iPhone Easytouch≤3.0No patch available
CVE-2017-1002000—
High7.2Unauthenticated Stored Cross-Site Scripting
NewStatPress<1.2.5Update to 1.2.5
CVE-2017-18575—
Medium6.1Stored Cross-Site Scripting
Relevanssi – A Better Search<3.5.8Update to 3.5.8
CVE-2017-1000038—
Critical9.8Arbitrary File Upload
Wordpress Plugin Mobile App Native 3.03.0 – 3.0No patch available
CVE-2017-6104—
Medium6.1Cross-Site Scripting
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18615—
High8.1Blind SQL Injection
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18614—
High8.8Cross-Site Request Forgery
Democracy Poll≤5.3.6Update to 5.4
CVE-2017-18521—
Medium6.1Reflected Cross-Site Scripting
GD Rating System<2.1Update to 2.1
CVE-2017-18591—
Medium6.1Cross-Site Scripting
Democracy Poll<5.4Update to 5.4
CVE-2017-18520—
Medium6.1Cross-Site Scripting
Wordpress plugin AnyVar≤0.1.1No patch available
CVE-2017-6103—
Critical9.8Arbitrary File Upload
Fast Image Adder≤1.1Update to 1.2
CVE-2015-1000001—
Medium6.1Cross-Site Scripting
Time Sheets<1.5.2Update to 1.5.2
CVE-2017-18582—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6096—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6098—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6570—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6573—
High7.2SQL Injection via camp_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6097—
High7.2SQL Injection via member_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6575—
Critical9.8SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6095—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6572—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6571—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6577—
Medium6.1Reflected Cross-Site Scripting
Time Sheets<1.5.0Update to 1.5.0
CVE-2017-18581—
Medium6.1Authenticated (Admin+) Stored Cross-Site Scripting
Easy Table≤1.6Update to 1.7
CVE-2017-20108—

Search VulnCrest Radar

Jump to

Are you sure?