CVE-2026-93945 WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...

CVE-2026-93941 WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93938

The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...

CVE-2026-93936

The WordPress IPharm theme (versions

CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

CVE-2026-93934

The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...

CVE-2026-93934 WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13...

CVE-2026-93933 WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4...

CVE-2026-93931 WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0...

CVE-2026-93933

The ThemeREX Group Rosalinda WordPress theme is vulnerable to PHP Object Injection in versions

CVE-2026-93931

The Smash theme by ThemeREX Group for WordPress is vulnerable to a PHP Object Injection vulnerability in versions

CVE-2026-93929

The ThemeREX Group Travesia WordPress theme is vulnerable to a PHP Object Injection flaw in versions 1.1.16 and below . This vulnerability arises from the deserialization of untrusted data , which may allow an attacker to inject objects into the application. The impact is rated as CRITICAL with a...

CVE-2026-12626

The Bookly plugin for WordPress (versions up to and including 28.2 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input via the 'value' parameter . This flaw allows authenticated attackers with custom-level access or higher to inject a PHP Object. While a vulnerab...

EUVD-2026-96221

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...

CVE-2026-12626 Online Scheduling and Appointment Booking System <= 28.2 - Authenticated (Custom+) PHP Object Injection via 'value' Parameter

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...

Joomla-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker compose file to setup environment for CVE 2015-8562 testing Table of Contents 1. About The Project 2. Getting Started Prerequisites Installation 3. Usage 4. Contributing 5. License About The Project This project includes a Docker compose file to setup environment...

CVE-2025-65791

CVE-2025-65791 — Command Injection in ZoneMinder Overview A critical Command Injection vulnerability exists in ZoneMinder v1.36.34 due to improper input validation in the web/views/image.php component. Unsanitized user-controlled input is passed directly to the PHP exec function, allowing remote...

CVE-2024-4577-PHP-CGI-RCE

This is a YAML file written specifically for the php-CGI RCE vulnerability - High Risk Introduction php-CGI is an interface used by web servers to run PHP scripts. It connects the PHP interpreter to the web server through CGI Common Gateway Interface. Vulnerability Cause PHP ignored the Best-Fit...

CVE-2026-104899

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...