https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:39:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-285445 EUVD-2026-285445 https://cve.radiocsirt.org/vuln/euvd-2026-285445 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2025 <p>The &#34;BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages&#34; plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. CVE-2024-32603 is likely a duplicate of this issue.</p> <p>The &#34;BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages&#34; plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. CVE-2024-32603 is likely a duplicate of this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2025 https://cve.radiocsirt.org/vuln/ghsa-q63f-fm77-phfq <p>The &#34;BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages&#34; plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> <p>The &#34;BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages&#34; plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.</p> https://cve.radiocsirt.org/vuln/ghsa-q63f-fm77-phfq https://cve.radiocsirt.org/vuln/gsd-2024-2025 gsd-2024-2025 https://cve.radiocsirt.org/vuln/gsd-2024-2025