TI-2024-12815 CVE-2024-13789 · GHSA-q7jm-wp7h-jx6hRavpage <= 2.31 - PHP Object InjectionPriority MEDIUM 50The ravpage plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.31 via deserialization of untrusted input from the 'paramsv2' parameter.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00813 · Published 2025-02-20 · No fix listed CWE-502