iControlWP vulnerabilities

1 known vulnerability in iControlWP from Paultgoodchild. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  iControlWP: Deserialization of Untrusted Data

  CVE-2024-13742Jan 30, 2025Paultgoodchild

  The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter. This makes it possible for unauthenticate