Description

Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a through <= 3.1.15.

Severity (CVSS)

Base score7.2
SeverityHigh
VersionCVSS 3.1
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Provided byCNA

Weaknesses

  • CWE-502 — Deserialization of Untrusted Data

Affected products

VendorProductVersions
ShapedPlugin LLCReal Testimonials0 to <=3.1.15

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 14 Jul 2026 07:01 UTC.