CyberSecBulletin

Webdzier vulnerabilities

We track 2 vulnerabilities in Webdzier products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 7, 2024.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Webdzier vulnerabilities

  • 8.8 High severity

    Gallery: Deserialization of Untrusted Data

    CVE-2024-11501Webdzier

    The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level ac

  • 8.8 High severity

    Button: Deserialization of Untrusted Data

    CVE-2024-1872Burgersoftware

    The Button plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.27 via deserialization of untrusted input in the button_shortcode function. This makes it possible for authenticated attackers, with contributor-lev