brainstormforce convertplug vulnerabilities (CVE)

CVE records published for brainstormforce convertplug, newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2024-3240 2 years ago

ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

Brainstorm Force ConvertPlus; brainstormforce convertplug

The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 via deserialization of untrusted input from the 'settings_encoded' attribute of the 'smile_info_bar' shortcode. This makes it possible for …