convertplug vulnerabilities

1 known vulnerability in convertplug from Brainstormforce. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ConvertPlus: Deserialization of Untrusted Data

  CVE-2024-3240May 4, 2024Brainstorm Force

  The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 via deserialization of untrusted input from the 'settings_encoded' attribute of the 'smile_info_bar' shortcode. This makes it possible for a