Critical · 9.8 CVE-2024-49318 EUVD-2024-43381GHSA-qhrq-52qx-58fx

WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Scott Product: My Reading Library

Description

Deserialization of Untrusted Data vulnerability in Scott My Reading Library my-reading-library allows Object Injection.This issue affects My Reading Library: from n/a through <= 1.0.

Affected products

Vendor	Product	Affected	Fixed
Scott	My Reading Library	≤ 1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/my-reading-library/vulnerability/wordpress-my-reading-library-plugin-1-0-php-object-injection-vulnerability?_s_id=cve vdb-entry