VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-502Vulnerability type

WordPress PHP Object Injection vulnerabilities (page 1335)

unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress PHP Object Injection vulnerabilities (page 1335)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export≤3.7.2Update to 3.7.3
CVE-2015-10125—
Medium6.1Cross-Site Scripting
WeeklyNews<2.2.9Update to 2.2.9
CVE-2015-9504—
High7.52.2.21 - Information Exposure
Slideshow2.2.8 – 2.2.21Update to 2.2.22
CVE-2015-3634—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Ad Inserter – Ad Manager & AdSense Ads<1.5.3Update to 1.5.3
CVE-2015-9497—
Medium6.1Reflected Cross-Site Scripting
GF Windcave Free≤1.4.2Update to 1.4.3
CVE-2015-10117—
Medium4.9Directory Traversal
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3301—
High7.5Sensitive Information Disclosure
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3302—
Medium6.1Multiple Cross-Site Scripting
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3300—
High7.5HTTP Response Splitting
Smart External Link Click Monitor [Link Log]≤1.4Update to 2.0
CVE-2015-9345—
Medium6.1Ultimate Newspaper Theme <= 1.3.3 - Cross-Site Scripting
Exquisite - Ultimate Newspaper Theme≤1.3.3No patch available
CVE-2015-9500—
High8.8Cross-Site Request Forgery
WPS Hide Login<1.1Update to 1.1
CVE-2015-9498—
High7.2Cross-Site Scripting via Comments
WordPress≤4.2Update to 4.0.4 or 4.1.4 or 4.2.1
CVE-2015-3440—
Medium6.1Reflected Cross-Site Scripting
Resend Welcome Email≤1.0.1Update to 1.0.2
CVE-2015-10078—
Medium6.1Reflected Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<2.3.7Update to 2.3.7
CVE-2015-9305—
Medium6.1Reflected Cross-Site Scripting
Mark User as Spammer≤1.0.1Update to 1.0.2
CVE-2015-10093—
Medium6.1Reflected Cross-Site Scripting
WooSidebars Sidebar Manager Converter≤1.1.1Update to 1.1.2
CVE-2015-10115—
Medium6.1Reflected Cross-Site Scripting
Icons for Features≤1.0.0Update to 1.0.1
CVE-2015-10104—
Medium6.1Reflected Cross-Site Scripting
WooFramework Tweaks≤1.0.1Update to 1.0.2
CVE-2015-10113—
Medium6.1Reflected Cross-Site Scripting
WooFramework Branding≤1.0.1Update to 1.0.2
CVE-2015-10112—
Medium6.1Cross-Site Scripting
OptionTree≤2.5.3Update to 2.5.4
CVE-2015-9320—
Medium6.1Reflected Cross-Site Scripting
WooSidebars≤1.4.1Update to 1.4.2
CVE-2015-10114—
High7.1Cross-Site Scripting
WP-Spreadplugin<3.8.6.2Update to 3.8.6.2
CVE-2015-10132—
High7.2Cross-Site Scripting
WordPress≤4.1.1Update to 3.7.6 or 3.8.6 or 3.9.4 or 4.0.2 or 4.1.2
CVE-2015-3438—
Medium6.1Reflected Cross-Site Scripting
Shortcode Factory≤1.1Update to 1.1.1
CVE-2015-9321—
Medium6.1 Reflected Cross-Site Scripting
2Checkout Add-on for iThemes Exchange<1.1.0Update to 1.1.0
CVE-2015-9364—
Medium6.1Cross-Site Scripting
Easy Digital Downloads - Amazon S3≤2.1.3Update to 2.1.4
CVE-2015-9506—
Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads - Product Reviews≤1.3.8Update to 1.3.10
CVE-2015-9526—
Medium6.1Quota < 1.2.5 - Cross-Site Scripting
Easy Digital Downloads - Quota<1.2.5Update to 1.2.5
CVE-2015-9534—
Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads – Manual Purchases<1.9.1Update to 1.9.1
CVE-2015-9517—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy<2.3.7Update to 1.8.7 or 1.9.10 or 2.0.5 or 2.1.11 or 2.2.9 or 2.3.7
CVE-2015-9505—

Search VulnCrest Radar

Jump to

Are you sure?