CVE-2021-24857 | BDVDB-2026-165607 Detail

ToTop Link

Description#

The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-502 Deserialization of Untrusted Data

References#

https://wpscan.com/vulnerability/518204d8-fbf5-4bfa-9db5-835f908f8d8e

Exploit#

No public exploit known

History#

Version 12021-12-13Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.