Vulnerabilities > Icontrolwp

DATE CVE VULNERABILITY TITLE RISK
2025-01-30 CVE-2024-13742 Deserialization of Untrusted Data vulnerability in Icontrolwp
The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter.
network
low complexity
icontrolwp CWE-502
critical
9.8
2023-08-14 CVE-2023-30751 Unspecified vulnerability in Icontrolwp Article Directory Redux 1.0.2
Auth.
network
low complexity
icontrolwp
4.8