Approved changes feed: RSS · Atom

cpe:2.3:a:thimpress:fundpress:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThimpress (3359de0e-d602-5f4a-8b30-12c81ab7a63c)
ProductFundpress (954a89ed-5a22-5c17-add9-7b920b88f0fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24601 vulnerable 2026-06-03 14:59:56.406683 WordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in ThimPress FundPress fundpress allows Object Injection.This issue affects FundPress: from n/a through <= 2.0.6.
Published: 2025-01-27T13:59:49.059Z
Updated: 2026-04-28T16:11:29.418Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.