CVE-2026-96343

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-95531

Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...

CVE-2026-94677

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

CVE-2026-94683

Contributor PHP Object Injection in DesignSetGo = 2.8.0 versions...

CVE-2026-94678

Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...

CVE-2026-94122

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94121

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...

CVE-2026-94076

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO = 14.2.5 versions...

CVE-2026-93771

Shop manager PHP Object Injection in Cost of Goods for WooCommerce = 3.5.2 versions...

CVE-2026-93651

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce = 2.1.2 versions...

CVE-2026-93624

Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...

WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Nested Pages versions = 3.3.2...

WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.66...

WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Photo Gallery by 10Web versions = 1.8.46...

CVE-2026-97248

The Booking Activities WordPress plugin in versions

CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

EUVD-2026-89912

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...

EUVD-2026-89910

Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...