Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker allows Object Injection.This issue affects Mail Picker: from n/a through 1.0.14.
History

Fri, 13 Dec 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 13 Dec 2024 14:30:00 +0000

Type Values Removed Values Added
Description Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker allows Object Injection.This issue affects Mail Picker: from n/a through 1.0.14.
Title WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability
Weaknesses CWE-502
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-12-13T14:24:48.718Z

Updated: 2024-12-13T20:56:13.409Z

Reserved: 2024-12-02T12:04:05.094Z

Link: CVE-2024-54273

cve-icon Vulnrichment

Updated: 2024-12-13T20:56:03.965Z

cve-icon NVD

Status : Received

Published: 2024-12-13T15:15:31.497

Modified: 2024-12-13T15:15:31.497

Link: CVE-2024-54273

cve-icon Redhat

No data.