Skip to content
OpenAdvisories
High · 8.0 CVE-2024-29800 EUVD-2024-1116GHSA-6363-v5m4-fvq3

WordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerability

Published May 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Timber Team & Contributors Product: Timber Package: timber/timber Ecosystem: Packagist

Description

Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0.

Affected products

VendorProductAffectedFixed
Timber Team & Contributors Timber ≤ 1.23.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist timber/timber >= 2.0.0, < 2.1.0 2.1.0 GHSA-6363-v5m4-fvq3
Packagist timber/timber >= 1.24.0, < 1.24.1 1.24.1 GHSA-6363-v5m4-fvq3
Packagist timber/timber >= 0.16.6, < 1.23.1 1.23.1 GHSA-6363-v5m4-fvq3

References