Skip to content
OpenAdvisories

Vendor

levantoan

2 known vulnerabilities.

Products

Image Hotspot by DevVN 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-7656

    Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection

    The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deserialization of untrusted input in the 'devvn_ihotspot_shortcode_func' function. This makes it possible for authenticated …

    levantoan Image Hotspot by DevVN Web / CMS