IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.5Orta

CVE-2024-3591WordPress Geo Controller < 8.6.5 - PHP Object Injection

Geo Controller; wordpress geo_controller Yayım: (2 yıl önce)

Açıklama

The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST API routes, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Zayıflık türü (CWE): CWE-502

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
— Geo Controller < 8.6.5
wordpress geo_controller - – < 8.6.5

Kaynaklar ve yamalar

Aynı üründe son açıklar — WordPress plugins & themes

7.2Yüksek
CVE-2026-97397

Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer

easywpstuff Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance

The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer in all versions up to, and including, 1.7 due to insu…