WordPress Plugin Vulnerabilities

SecureMoz Security Audit <= 1.0.5 - MitM PHP Object Injection

Description

The securemoz-security-audit WordPress plugin was affected by a MitM PHP Object Injection security vulnerability.

Affects Plugins

Plugin icon
securemoz-security-audit
No known fix

References

CVE
CVE-2015-6828
URL
https://seclists.org/oss-sec/2015/q3/500

Classification

Type
OBJECT INJECTION
OWASP top 10
A8: Insecure Deserialization
CWE
CWE-502

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
385f8b7b-f758-4a9b-8060-9db6d31dc2aa

Timeline

Publicly Published
2015-09-05 (about 10 years ago)
Added
2015-09-09 (about 10 years ago)
Last Updated
2019-10-26 (about 6 years ago)

Other

Published
Title
Published
2025-08-12
Title
Welcart e-Commerce < 2.11.17 - Authenticated (Editor+) PHP Object Injection
Published
2024-01-05
Title
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Published
2026-03-04
Title
Jardi | Winery, Vineyard & Wine Shop WordPress Theme <= 1.7.2 - Unauthenticated PHP Object Injection
Published
2025-05-21
Title
Pix 4x sem juros - Pagaleve < 1.6.10 - Unauthenticated PHP Object Injection
Published
2026-03-23
Title
Leroux - Business Consulting WordPress Theme < 1.4 - Unauthenticated PHP Object Injection