https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:39:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289052 EUVD-2026-289052 https://cve.radiocsirt.org/vuln/euvd-2026-289052 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0668 <p>The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the &#39;process_bulk_action&#39; function. This makes it possible for authenticated attacker, with administrator access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> <p>The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the &#39;process_bulk_action&#39; function. This makes it possible for authenticated attacker, with administrator access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0668 https://cve.radiocsirt.org/vuln/ghsa-fvvm-3cr2-6qx2 <p>The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the &#39;process_bulk_action&#39; function. This makes it possible for authenticated attacker, with administrator access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> <p>The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the &#39;process_bulk_action&#39; function. This makes it possible for authenticated attacker, with administrator access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> https://cve.radiocsirt.org/vuln/ghsa-fvvm-3cr2-6qx2 https://cve.radiocsirt.org/vuln/gsd-2024-0668 gsd-2024-0668 https://cve.radiocsirt.org/vuln/gsd-2024-0668