CVE-2024-25100criticalCWE-502

CVE-2024-25100: critical vulnerability in WP Swings Coupon Referral Program

WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

Published · Updated

Follow this CVE+ Monitor Coupon Referral Program

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 0.8%
Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
WP Swings · Coupon Referral Program
Related CVEs — WP Swings Coupon Referral Program

In the same product, most dangerous first.

CVE-2023-52190HIGHWordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data ExposureEPSS 0.5%