https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 02:06:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238073 EUVD-2026-238073 https://cve.radiocsirt.org/vuln/euvd-2026-238073 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3360 <p>The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.</p> <p>The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3360 https://cve.radiocsirt.org/vuln/ghsa-7h2h-qrhm-554p <p>The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.</p> <p>The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.</p> https://cve.radiocsirt.org/vuln/ghsa-7h2h-qrhm-554p https://cve.radiocsirt.org/vuln/gsd-2022-3360 gsd-2022-3360 https://cve.radiocsirt.org/vuln/gsd-2022-3360