High · 8.8 CVE-2024-49227 EUVD-2024-43297GHSA-mwpp-f4jm-gfhf

WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

Published Oct 16, 2024 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: foter Product: Free Stock Photos Foter

Description

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through <= 1.5.4.

Affected products

Vendor	Product	Affected	Fixed
foter	Free Stock Photos Foter	≤ 1.5.4	—

References

https://patchstack.com/database/Wordpress/Plugin/free-stock-photos-foter/vulnerability/wordpress-free-stock-photos-foter-plugin-1-5-4-php-object-injection-vulnerability?_s_id=cve vdb-entry