2 lines
1.9 KiB
JSON
2 lines
1.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"WP eCommerce","vendor":"Unknown","versions":[{"lessThanOrEqual":"3.15.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog."},{"lang":"es","value":"El plugin de WordPress WP eCommerce hasta la versión 3.15.1 deserializa la entrada del usuario a través de acciones AJAX, lo que podría permitir a usuarios no autenticados realizar una inyección de objetos PHP cuando un gadget adecuado está presente en el blog."}],"id":"CVE-2026-1235","lastModified":"2026-06-17T10:15:22.383","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.7,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1235","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-11T15:53:38.649157Z","version":"2.0.3"}}]},"published":"2026-02-11T06:15:51.220","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/c7eb234e-3113-40db-a00d-358604d91e3f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|