Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-98hx-rrj3-w3r4

Опубликовано: 28 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

EPSS

Процентиль: 28%
0.00105
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 6.5
nvd
3 месяца назад

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

EPSS

Процентиль: 28%
0.00105
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-502