wpengine Better Search Replace vulnerabilities (CVE)

CVE records published for wpengine Better Search Replace, newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2023-6933 2 years ago

Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection

wpengine Better Search Replace

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain …

68%EPSS