Attire vulnerabilities

1 known vulnerability in Attire from Shafayat-alam. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Attire: Deserialization of Untrusted Data

  CVE-2024-7435Aug 31, 2024Shafayat-alam

  The Attire theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PH