Lucene search
K

WordPress Admin Columns plugin <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution vulnerability

šŸ—“ļøĀ 05 Jun 2026Ā 00:00:00Reported byĀ Osvaldo Noe Gonzalez Del Rio (Os) - krei.dev | ogbuilders.ioTypeĀ 
patchstack
Ā patchstack
šŸ”—Ā patchstack.comšŸ‘Ā 8Ā Views

Authenticated (Contributor+) PHP object injection leads to remote code execution in WordPress Admin Columns plugin through seven point eighteen.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-7654
5 Jun 202622:28
–attackerkb
Circl
CVE-2026-7654
5 Jun 202623:59
–circl
CNNVD
WordPress plugin Admin Columns ä»£ē é—®é¢˜ę¼ę“ž
5 Jun 202600:00
–cnnvd
CVE
CVE-2026-7654
5 Jun 202622:28
–cve
Cvelist
CVE-2026-7654 Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value
5 Jun 202622:28
–cvelist
GithubExploit
Exploit for CVE-2026-7654
17 Jun 202609:49
–githubexploit
EUVD
EUVD-2026-34922
6 Jun 202600:31
–euvd
NVD
CVE-2026-7654
5 Jun 202623:16
–nvd
Positive Technologies
PT-2026-47065
5 Jun 202600:00
–ptsecurity
RedhatCVE
CVE-2026-7654
7 Jun 202600:43
–redhatcve
Rows per page
Vulners
Node
wordpressadmin_columnsRange≤7.0.18

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Jun 2026 00:00Current
5.7Medium risk
Vulners AI Score5.7
CVSS 3.18.8
EPSS0.00652
SSVC
8