Vulnerabilities > CVE-2023-51422 - Deserialization of Untrusted Data vulnerability in Saleswonder Webinarignition

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

saleswonder

CWE-502

NVD

Published: 2023-12-29

Updated: 2024-01-05

Summary

Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition: from n/a through 3.05.0.

Vulnerable Configurations

Part	Description	Count
Application	Saleswonder Saleswonder Webinarignition - Saleswonder Webinarignition 3.00.0 Saleswonder Webinarignition 3.00.1 Saleswonder Webinarignition 3.00.2 Saleswonder Webinarignition 3.00.3 Saleswonder Webinarignition 3.01.0 Saleswonder Webinarignition 3.01.1 Saleswonder Webinarignition 3.01.2 Saleswonder Webinarignition 3.01.3 Saleswonder Webinarignition 3.02.0 Saleswonder Webinarignition 3.02.1 Saleswonder Webinarignition 3.03.0 Saleswonder Webinarignition 3.03.2 Saleswonder Webinarignition 3.04.0 Saleswonder Webinarignition 3.04.1 Saleswonder Webinarignition 3.04.2 Saleswonder Webinarignition 3.04.3 Saleswonder Webinarignition 3.04.4 Saleswonder Webinarignition 3.04.5 Saleswonder Webinarignition 3.05.0	20

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://patchstack.com/database/vulnerability/webinar-ignition/wordpress-webinarignition-plugin-3-05-0-authenticated-php-object-injection-vulnerability?_s_id=cve