https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:59:29 +0000 https://cve.radiocsirt.org/vuln/cve-2022-2438 <p><strong>Affected:</strong> wpmudev Broken Link Checker</p> <p>The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;$log_file&#39; value in versions up to, and including 1.11.16. This makes it possible for authenticated attackers with administrative privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.</p> <p><strong>Affected:</strong> wpmudev Broken Link Checker</p> <p>The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;$log_file&#39; value in versions up to, and including 1.11.16. This makes it possible for authenticated attackers with administrative privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.</p> https://cve.radiocsirt.org/vuln/cve-2022-2438