Deserialization of Untrusted Data Vulnerability Affects Coupon Referral Program
CVE-2024-25100

10CRITICAL

Key Information:

Vendor

WordPress
Status
Coupon Referral Program
Vendor
CVE Published:
12 February 2024

What is CVE-2024-25100?

A security vulnerability exists in the WP Swings Coupon Referral Program due to improper handling of data deserialization. This issue allows attackers to exploit untrusted data inputs, potentially leading to unauthorized PHP object injection. Specifically, this vulnerability pertains to versions of the Coupon Referral Program ranging from an unspecified version up to 1.7.2, exposing users to risks that compromise the integrity and confidentiality of their web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Coupon Referral Program < 1.8.4

References

https://patchstack.com/database/wordpress/plugin/coupon-r...
vdb-entry

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dave Jong (Patchstack)
JSON
.