webhuntinfotech

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

webhuntinfotech records in CISA KEV

No webhuntinfotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Photo Video Gallery Master 1 record MEDIUM Universal Slider 1 record LOW

Records

1 record in Universal Slider · all components

TI-2024-05245 CVE-2024-5649 · GHSA-r438-mxg9-x66p

Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection

LOW 38

The Universal Slider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.5 via deserialization of untrusted input 'fsl_get_gallery_value' function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00438 Published 2024-06-19 No fix listed CWE-502

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0