plugin
5 known security issues reported for the Ajax Random Posts WordPress plugin. Most recent disclosed Nov 16, 2024.
Running Ajax Random Posts on your site? Check whether your installed version is affected.
Scan your site free[en] Deserialization of Untrusted Data vulnerability in Phan An AJAX Random Posts allows Object Injection.This issue affects AJAX Random Posts: from n/a through 0.3.3.
The AJAX Random Posts plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.3.3 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is presen...
The AJAX Random Posts plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.3.3 via deserialization of untrusted input passed through the 'data' parameter. This allows unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to ex...
The AJAX Random Posts plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.3.3 via deserialization of untrusted input passed through the 'data' parameter. This allows unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to ex...
The plugin ajax-random-posts insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. The original researcher notified WordPress Plugins team.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free