Skip to content
OpenAdvisories

Product · Design themes

VEDA - MultiPurpose WordPress Theme

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection

    The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2 via deserialization of untrusted input in the 'veda_backup_and_restore_action' function. This makes it possible for aut…