Read the docs

Rymera Web Co

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Rymera Web Co records in CISA KEV

No Rymera Web Co vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wholesale Suite 2 records LOW Advanced Coupons 1 record LOW Auto Refresh Single Page 1 record MEDIUM

Records

1 record in Auto Refresh Single Page · all components

TI-2024-01610 CVE-2024-1731 · GHSA-hjp2-wg69-g55x

Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 42

The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1 via deserialization of untrusted input from the arsp_options post meta option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00851 Published 2024-03-05 No fix listed CWE-502
Open these records in search →