BuddyForms WordPress Plugin vulnerabilities
We track 1 vulnerability in BuddyForms WordPress Plugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 23, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest BuddyForms WordPress Plugin vulnerabilities
- 9.8 Critical severity
BuddyForms WordPress Plugin: Deserialization of Untrusted Data
The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arb