CVE-2026-39576: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

CVE-2026-40738: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...

CVE-2025-69146: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Dom = 1.24 versions...

WordPress Theme: neuronet: CVE-2025-58952: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...

CVE-2026-54814: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.109...

CVE-2026-12256: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...

CVE-2026-39442: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

CVE-2026-42380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-40753: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

CVE-2026-49075: Deserialization of Untrusted Data

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-39445: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-40756: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

CVE-2026-54806: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40758: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

CVE-2026-39577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

CVE-2026-39568: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Mr. SEO = 2.0 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...