Skip to content
OpenAdvisories

Vendor

codexonics

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace

    The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). A…