Otter vulnerabilities
We track 1 vulnerability in Otter products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 30, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Otter vulnerabilities
- 8.8 High severity
Otter: Deserialization of Untrusted Data
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.