Vulnerabilities > CVE-2024-38759 - Deserialization of Untrusted Data vulnerability in Wp-Media Search & Replace

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wp-media

CWE-502

critical

NVD

Published: 2024-07-22

Updated: 2024-08-27

Summary

Deserialization of Untrusted Data vulnerability in WP MEDIA SAS Search & Replace search-and-replace.This issue affects Search & Replace: from n/a through 3.2.2.

Vulnerable Configurations

Part	Description	Count
Application	Wp-Media WP Media Search & Replace - WP Media Search & Replace 2.5.1 WP Media Search & Replace 2.6.0 WP Media Search & Replace 2.6.1 WP Media Search & Replace 2.6.2 WP Media Search & Replace 2.6.3 WP Media Search & Replace 2.6.4 WP Media Search & Replace 2.6.5 WP Media Search & Replace 2.6.6 WP Media Search & Replace 2.7.0 WP Media Search & Replace 2.7.1 WP Media Search & Replace 3.0.0 WP Media Search & Replace 3.0.1 WP Media Search & Replace 3.1.0 WP Media Search & Replace 3.1.1 WP Media Search & Replace 3.1.2 WP Media Search & Replace 3.2.0 WP Media Search & Replace 3.2.1 WP Media Search & Replace 3.2.2	19

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://patchstack.com/database/vulnerability/search-and-replace/wordpress-search-replace-plugin-3-2-2-deserialization-of-untrusted-data-vulnerability?_s_id=cve