webhuntinfotech

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

webhuntinfotech records in CISA KEV

No webhuntinfotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Photo Video Gallery Master 1 record MEDIUM Universal Slider 1 record LOW

Records

2 records

TI-2024-05318 CVE-2024-5724 · GHSA-8q9h-wh74-mr38

Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection

MEDIUM 41

The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.3 via deserialization of untrusted input 'PVGM_all_photos_details' parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2024-06-19 No fix listed CWE-502

TI-2024-05245 CVE-2024-5649 · GHSA-r438-mxg9-x66p

Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection

LOW 38

The Universal Slider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.5 via deserialization of untrusted input 'fsl_get_gallery_value' function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00438 Published 2024-06-19 No fix listed CWE-502

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0