110620 matches found
PT-2026-68566
Name of the Vulnerable Software and Affected Versions Advice versions prior to 1.18.1 Description The Advice - Psychology, Therapy & Counseling Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...
PT-2026-68774
Impact PHP CodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code creating the Gitblame, Hgblame and Svnblame reports. As a result, running PHP CodeSniffer over untrusted files, for example, in a CI pipeline that scans pull requests, or on a developer...
PT-2026-68569
Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...
CVE-2026-65574: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65579: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65576: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65572: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...
CVE-2026-65556: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65549: Deserialization of Untrusted Data
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-65575: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-71478: Improper Neutralization of Input During Web Page Generation
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...
PT-2026-68562
Name of the Vulnerable Software and Affected Versions Abelle versions prior to 1.23 Description The Abelle theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored dat...
SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3509-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3509-1 advisory. Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded...
CVE-2026-28139: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...
PT-2026-68564
Name of the Vulnerable Software and Affected Versions Accalia versions prior to 1.5.4 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...
PT-2026-68561
Name of the Vulnerable Software and Affected Versions A.Williams versions prior to 1.3.2 Description The A.Williams plugin for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. This issue occurs when the application processe...
CVE-2026-71488: Inefficient Algorithmic Complexity
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...