CWE-502: Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Also known as Marshaling/Marshalling, Unmarshaling/Unmarshalling, Pickling, Unpickling, PHP Object Injection.
A kind of CWE-913 Improper Control of Dynamically-Managed Code Resources.
From the CWE List. © The MITRE Corporation.
Newest
- ministry of justice uyap document editorInsecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor8.8 High
- manageiq, red hat cloudforms +1 moreYAML safe_load production fallback to unsafe_load enables RCE via deserialization8.8 High
- ancorathemes buzz stone | magazine & viral blog wordpress themeWordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes photoliaWordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes qweryWordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability9.8 Critical
- themerex jacquelineWordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability9.8 Critical
- themerex allianceWordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes kickerWordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes originalWordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes anestaWordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes fc unitedWordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability9.8 Critical
- themerex shiftcvWordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability9.8 Critical
- themerex windsorWordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability9.8 Critical
- themerex education centerWordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes drone mediaWordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability9.8 Critical
- amir helzer woocommerce multilingual & multicurrencyWordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability7.2 High
- themerex asia gardenWordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability9.8 Critical
- themerex n7 | golf club sports & eventsWordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability9.8 Critical
- themerex invetexWordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability9.8 Critical
- themerex law officeWordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability9.8 Critical
- themerex wineshopWordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability9.8 Critical
- themerex equadioWordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability9.8 Critical
- themerex junoWordPress Juno theme <= 2.25 - PHP Object Injection vulnerability9.8 Critical
- boldthemes avalaWordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability9.8 Critical
- the4 kallesWordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability9.8 Critical
- themerex yacht rentalWordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability9.8 Critical
- themerex wine houseWordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability9.8 Critical
- themerex tipsyWordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability9.8 Critical
- themerex stargazeWordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability9.8 Critical
- themerex splendourWordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability9.8 Critical
- rascals angioWordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability8.8 High
- ancorathemes cleanskinWordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability9.8 Critical
- sarah giles dynamic user directoryWordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability9.8 Critical
- pluggabl booster for woocommerceWordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability9.8 Critical
- payever - woocommerce gatewayWordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability9.8 Critical
- villatheme affi – affiliate marketing for woocommerceWordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability9.8 Critical
- bplugins super video playerWordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability7.2 High
- tainacanWordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability7.2 High
- 10web slider by 10webWordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability8.8 High
- themerex group bookloversWordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes balanceWordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability9.8 Critical
- themerex group cameliaWordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes convexWordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes dwellWordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability9.8 Critical
- themerex group gutentypeWordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability9.8 Critical
- themerex group edemaWordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes greenyWordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability9.8 Critical
- themerex group hogwordsWordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes hygiaWordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes ipharmWordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…