Skip to content
OpenAdvisories

Vendor

wordpressdotorg

2 known vulnerabilities.

Products

WordPress Importer 1 OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-13889

    WordPress Importer <= 0.8.3 - Authenticated (Administrator+) PHP Object Injection

    The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.8.3 via deserialization of untrusted input in the 'maybe_unserialize' function. This makes it possible for authenticated attackers, with …

    wordpressdotorg WordPress Importer Web / CMS