Remote API vulnerabilities
We track 1 vulnerability in Remote API products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest Remote API vulnerabilities
- 9.0 Critical severity
Remote API: Improper Control of Generation of Code
The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, allowing unauthenticated attackers to inject arbitrary PHP objects, which can lead to remote code execution when a suitable gadget chain is pr