Deserialization of Untrusted Data Vulnerability Affects ERE Recently Viewed - Essential Real Estate Add-On
CVE-2024-24797
9.8CRITICAL
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 12 February 2024
What is CVE-2024-24797?
A vulnerability exists in the G5Theme ERE Recently Viewed – Essential Real Estate Add-On that allows unauthenticated users to exploit a deserialization of untrusted data flaw. This vulnerability can enable attackers to manipulate serialized data to potentially execute arbitrary code on the server. The affected version ranges from n/a up to and including 1.3, making it crucial for users of this add-on to ensure their installations are updated or seek remediation strategies. Addressing this issue is essential for maintaining the integrity and security of WordPress sites utilizing this plugin.
Affected Version(s)
ERE Recently Viewed – Essential Real Estate Add-On <= 1.3