VulnSocial

CVE-2024-1731General(rymera / auto_refresh_single_page)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1 via deserialization of untrusted input from the arsp_options post meta option. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

rymera CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • auto_refresh_single_page

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
rymera
Products
auto_refresh_single_page

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-20: 102-20
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • FK94 Security@FK94SECURITY
    General

    Si sos founder o inversor, tu cuenta de correo personal NO debería ser la misma que usás para gestionar tus inversiones o la infraestructura de tu empresa. CVE-2024-1731 es un recordatorio de que el riesgo de ser targeteado es real. Separá tus identidades digitales.

    Post summary

    The post briefly mentions CVE-2024-1731 as a reminder of target risks and advises separating digital identities, without providing any technical details or exploit information.

    0000041
    6 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apprymeraauto_refresh_single_page-wordpress-

Explore more

Back to dashboardrymera CVEsauto_refresh_single_page vulnerabilities