https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:12:55 +0000 https://cve.radiocsirt.org/vuln/cve-2022-2439 <p><strong>Affected:</strong> smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy, easydigitaldownloads easy_digital_downloads</p> <p>The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;upload[file]&#39; parameter in versions up to, and including 3.3.3. This makes it possible for authenticated administrative users to call files using a PHAR wrapper, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present.</p> <p><strong>Affected:</strong> smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy, easydigitaldownloads easy_digital_downloads</p> <p>The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the &#39;upload[file]&#39; parameter in versions up to, and including 3.3.3. This makes it possible for authenticated administrative users to call files using a PHAR wrapper, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present.</p> https://cve.radiocsirt.org/vuln/cve-2022-2439