110118 matches found
PT-2026-103504
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
PT-2026-103184
Contributor PHP Object Injection in DesignSetGo = 2.8.0 versions...
CVE-2026-94683: Deserialization of Untrusted Data
Contributor PHP Object Injection in DesignSetGo = 2.8.0 versions...
PT-2026-103217
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 = 3.5.51 versions...
PT-2026-103507
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
PT-2026-103242
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246: Deserialization of Untrusted Data
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
PT-2026-103159
Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce = 2.1.2 versions...
PT-2026-103161
Shop manager PHP Object Injection in Cost of Goods for WooCommerce = 3.5.2 versions...
CVE-2026-103474: Unrestricted Upload of File with Dangerous Type
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...
PT-2026-103483
Name of the Vulnerable Software and Affected Versions Nested Pages versions prior to 3.3.3 Description Nested Pages is subject to a PHP Object Injection issue. This occurs when untrusted data is passed to the unserialize function, allowing an attacker to inject malicious objects into the...
PT-2026-103181
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...
CVE-2026-100512: Deserialization of Untrusted Data
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
PT-2026-103244
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97248: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
PT-2026-103158
Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...
PT-2026-103216
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-96832: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...
CVE-2026-94677: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...
CVE-2026-102427: Unrestricted Upload of File with Dangerous Type
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...