Vulnerabilities

TI-2025-37604 CVE-2025-60238 · GHSA-2m57-2jcm-c3xj

WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue affects UNIVERSAM: from n/a through <= 9.04.02.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-10-22 No fix listed CWE-502

TI-2024-36415 CVE-2024-54327 · GHSA-xxcf-46fg-r5q4

WordPress UNIVERSAM plugin < 8.59 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in universam UNIVERSAM universam-demo allows Reflected XSS.This issue affects UNIVERSAM: from n/a through < 8.59.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-12-13 No fix listed CWE-79

Vulnerabilities

Filters

WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability

WordPress UNIVERSAM plugin < 8.59 - Reflected Cross Site Scripting (XSS) vulnerability