110338 matches found
PT-2026-103185
Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...
PT-2026-103189
Custom role PHP Object Injection in eCommerce Product Catalog = 3.6.0 versions...
PT-2026-103490
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-97246: Deserialization of Untrusted Data
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-96833: Deserialization of Untrusted Data
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 = 3.5.51 versions...
CVE-2026-94076: Deserialization of Untrusted Data
Contributor PHP Object Injection in SEO Plugin by Squirrly SEO = 14.2.5 versions...
CVE-2026-93624: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...
CVE-2026-102392: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-100512: Deserialization of Untrusted Data
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
CVE-2026-103229: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...
CVE-2026-94677: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...
CVE-2026-94122: Deserialization of Untrusted Data
Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...
PT-2026-103022
The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...
PT-2026-103215
Contributor PHP Object Injection in Themify Builder = 7.8.1 versions...
PT-2026-103504
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-96831: Deserialization of Untrusted Data
Contributor PHP Object Injection in Themify Builder = 7.8.1 versions...
CVE-2026-93651: Deserialization of Untrusted Data
Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce = 2.1.2 versions...
CVE-2026-94683: Deserialization of Untrusted Data
Contributor PHP Object Injection in DesignSetGo = 2.8.0 versions...