未評価
WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection
CVE-2023-34382
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.19.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org