https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:28:36 +0000 https://cve.radiocsirt.org/vuln/cve-2022-2437 <p><strong>Affected:</strong> slickremix Feed Them Social – Social Media Feeds, Video, and Photo Galleries</p> <p>The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;fts_url&#39; parameter in versions up to, and including 2.9.8.5. This makes it possible for unauthenticated attackers to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.</p> <p><strong>Affected:</strong> slickremix Feed Them Social – Social Media Feeds, Video, and Photo Galleries</p> <p>The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;fts_url&#39; parameter in versions up to, and including 2.9.8.5. This makes it possible for unauthenticated attackers to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.</p> https://cve.radiocsirt.org/vuln/cve-2022-2437