Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:76861F59-BD45-4C27-96BF-3DDF96456059
HistoryAug 10, 2022 - 12:00 a.m.

Easy Digital Downloads < 3.0.2 - Admin+ PHP Object Injection

2022-08-1000:00:00
wpscan.com
6
easy digital downloads
admin
php object injection
user input
unserialising
high privilege
security

0.001 Low

EPSS

Percentile

42.8%

JSON

The plugin does not validate user input before unserialising it, which could allow high privilege users to perform PHP Objection injection attacks

CPENameOperatorVersion
easy-digital-downloadslt3.0.2

Related

cve 1
nvd 1
cvelist 1
patchstack 1
prion 1
cve
cve
CVE-2022-33900
2022-08-22 15:15:15
nvd
nvd
CVE-2022-33900
2022-08-22 15:15:15
cvelist
cvelist
CVE-2022-33900 WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability
2022-08-10 00:00:00
patchstack
patchstack
WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability
2022-08-10 00:00:00
prion
prion
Design/Logic Flaw
2022-08-22 15:15:00

0.001 Low

EPSS

Percentile

42.8%

JSON
Related for WPVDB-ID:76861F59-BD45-4C27-96BF-3DDF96456059
cve1nvd1cvelist1patchstack1prion1