CVE-2024-29136 - WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability

HIGH

WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability

Published Mar 19, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.63%

Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<=2.11.17

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<=2.11.17

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

Link	Providers	Tags
https://patchstack.com/database/Wordpress/Plugin/tourfic/vulnerability/wordpress-tourfic-plugin-2-11-17-php-object-injection-vulnerability?_s_id=cve		vdb-entry
https://patchstack.com/database/vulnerability/tourfic/wordpress-tourfic-plugin-2-11-17-php-object-injection-vulnerability?_s_id=cve		Third Party Advisory