← All advisories

Critical severity9.8NVD Advisory· Published Nov 16, 2024· Updated Apr 28, 2026

CVE-2024-52412

CVE-2024-52412

Description

Deserialization of Untrusted Data vulnerability in Stephen Cui Xin allows Object Injection.This issue affects Xin: from n/a through 1.0.8.1.

Affected products

2

WordPress/Xininferred2 versions
<=1.0.8.1+ 1 more
- (no CPE)range: <=1.0.8.1
- (no CPE)range: <=1.0.8.1
Package: https://wordpress.org/themes/xin

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/xin/wordpress-xin-theme-1-0-8-1-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.