CWE-502: Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Also known as Marshaling/Marshalling, Unmarshaling/Unmarshalling, Pickling, Unpickling, PHP Object Injection.
A kind of CWE-913 Improper Control of Dynamically-Managed Code Resources.
From the CWE List. © The MITRE Corporation.
Newest
- melapress wp activity logWordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability9.8 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability9.8 Critical
- thrive themes apprenticeWordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability9.8 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability9.8 Critical
- jwsthemes ai labWordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability9.8 Critical
- mikado-themes easymealsWordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability8.1 High
- edge-themes reinaWordPress Reina theme <= 2.1 - PHP Object Injection vulnerability8.1 High
- barn2 media ltd woocommerce product filtersWordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability9.8 Critical
- select-themes mildhillWordPress Mildhill theme <= 1.5 - PHP Object Injection vulnerability8.1 High
- select-themes zermattWordPress Zermatt theme <= 1.6.1 - PHP Object Injection vulnerability8.1 High
- veronalabs slimstat analyticsWordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability6.5 Medium
- themerex addonsWordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability9.8 Critical
- wpcalc counter box – add countdowns, timers & dynamic counters to wordpressCounter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import6.6 Medium
- edge-themes valeskaWordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability8.1 High
- edge-themes beholdWordPress Behold theme <= 1.5 - PHP Object Injection vulnerability8.1 High
- mikado-themes esméeWordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability8.1 High
- elated-themes léonieWordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerability8.1 High
- mikado-themes techlinkWordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability8.1 High
- elated-themes roisinWordPress Roisin theme <= 1.4 - PHP Object Injection vulnerability8.1 High
- mikado-themes ashtangaWordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability8.1 High
- mikado-themes luxedriveWordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability8.1 High
- edge-themes lauritsWordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability8.1 High
- select-themes micdropWordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability8.1 High
- elated-themes valianceWordPress Valiance theme <= 1.2 - PHP Object Injection vulnerability8.1 High
- elated-themes playroomWordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerability8.1 High
- select-themes santéWordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerability8.1 High
- elated-themes neobeatWordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerability8.1 High
- elated-themes fidalgoWordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerability8.1 High
- edge-themes alloggio - hotel bookingWordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability8.1 High
- themerex group elementraWordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability9.8 Critical
- presslayouts kapeeWordPress Kapee theme < 1.7.0 - PHP Object Injection vulnerability8.1 High
- presslayouts emallshopWordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerability8.1 High
- boldthemes niftyWordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability9.8 Critical
- themefusion fusion builderWordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability8.8 High
- themerex seafood companyWordPress SeaFood Company theme <= 1.4 - PHP Object Injection vulnerability9.8 Critical
- themerex hot coffeeWordPress Hot Coffee theme <= 1.7 - PHP Object Injection vulnerability9.8 Critical
- themefusion fusion builderWordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability9.8 Critical
- oracle weblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- langchain-ai langgraph, langchain langgraph-checkpoint, langchain-ai langraph-checkpoint +2 moreLangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading6.8 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Remote Code Execution via License Deserialization8.6 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause...7.8 High
- elixir-grpc grpcRemote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc9.2 Critical
- brainstorm force ottokitWordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability9.8 Critical
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability9.8 Critical
- tomdever wpforo forumWordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability9.8 Critical
- happyformsWordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability9.8 Critical
- crm perks integration for mailchimp and contact form 7, wpforms, elementor, ninja formsWordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability9.8 Critical
- crm perks integration for contact form 7 hubspotWordPress Integration for Contact Form 7 HubSpot plugin <= 1.3.7 - PHP Object Injection vulnerability9.8 Critical
- crm perks integration for salesforce and contact form 7, wpforms, elementor, formidable, ninja formsWordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability9.8 Critical
- crm perks integration for contact form 7 and constant contactWordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…