Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-49218 EUVD-2024-43289GHSA-mh59-qf67-hhp9

WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability

Published Oct 16, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently recently-viewed-most-viewed-and-sold-products-for-woocommerce allows Object Injection.This issue affects Recently: from n/a through <= 1.1.

Affected products

VendorProductAffectedFixed
Al Imran Akash Recently ≤ 1.1 —

References