Aller au contenu
Se connecter
9.8 Critique

CVE-2023-0232 The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products…

Description

The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

Produits et versions touchés

Produit Versions touchées Corrigé en
ShopLentor 2.5 premières → < 2.5.4 2.5.4

Autres CVE de ShopLentor

Les 2 CVE de ShopLentor →
CVE-2023-0231 The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting… Non notée
Suivre cette CVE