https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:09:38 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-29859 cnvd-2021-29859 https://cve.radiocsirt.org/vuln/cnvd-2021-29859 https://cve.radiocsirt.org/vuln/euvd-2026-23634 EUVD-2026-23634 https://cve.radiocsirt.org/vuln/euvd-2026-23634 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24217 <p>The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.</p> <p>The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24217 https://cve.radiocsirt.org/vuln/ghsa-w6px-4fhm-xxgc <p>The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.</p> <p>The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-w6px-4fhm-xxgc https://cve.radiocsirt.org/vuln/gsd-2021-24217 gsd-2021-24217 https://cve.radiocsirt.org/vuln/gsd-2021-24217