Filtered by vendor Nocean Subscriptions
Filtered by product Totop Link Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24857 1 Nocean 1 Totop Link 2024-08-03 9.8 Critical
The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain.