← CVE Intelligence

CVE-2024-3591

WordPress Geo Controller < 8.6.5 - PHP Object Injection PUBLISHED

Description (CNA)

The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST API routes, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Affected (CNA)

Vendor / productVersions
Unknown / Geo Controlleraffected 0 before 8.6.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.