📦 Envialosimple

This CVE describes an unauthenticated PHP object injection vulnerability in the EnvíaloSimple WordPress plugin. Attackers can exploit deserialization of untrusted data to execute arbitrary code on af...

This CSRF vulnerability in the EnvíaloSimple WordPress plugin allows unauthenticated attackers to upload malicious files by tricking administrators into clicking malicious links. All WordPress sites ...