Search CVEs

Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.

Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.

Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.

Shop manager PHP Object Injection in YayMail <= 4.3.3 versions.

Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions.

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions.

The CTX Feed – WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_plugin_installing() f

Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.

Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions.

Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. Th

Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.

Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.

A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions.

Subscriber PHP Object Injection in Entrepreneur - Booking for Small Businesses WordPress Theme <= 3.1.3 versions.

Contributor PHP Object Injection in Avada <= 3.15.3 versions.