Skip to content
Threat Feed
Subscribe

Product

Give - Tributes (<= 2.3.1)

1 brief RSS
critical advisory

Unauthenticated PHP Object Injection in Give - Tributes WordPress Plugin

An unauthenticated PHP object injection vulnerability in the Give - Tributes plugin (<= 2.3.1) allows attackers to inject serialized objects during the donation process, potentially leading to RCE if chained with existing application gadgets.

Give - Tributes wordpress deserialization rce vulnerability
1r 2t 1c