String locator vulnerabilities
We track 1 vulnerability in String locator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest String locator vulnerabilities
- 8.8 High severity
String locator: Deserialization of Untrusted Data
The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated