110623 matches found
CVE-2026-32470
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32470
The WordPress FundEngine plugin (versions ≤ 1.7.9) is vulnerable to unauthenticated PHP Object Injection, discovered by researcher daroo. CVSS 3.1 scores this critical (9.8) with network attack vector, no privileges or user interaction required, impacting confidentiality, integrity, and availabil...
CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32465
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-32465
Essential Real Estate is a WordPress plugin affected by a PHP Object Injection vulnerability in versions 5.3.3 and below . The flaw is located in the plugin's customer-facing functionality, allowing an authenticated low-privilege user to inject a malicious PHP object over the network without user...
CVE-2026-32465 WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
EUVD-2026-60901
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-32465 WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-28570
Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...
WordPress Contact Form, Survey, Quiz & Popup Form Builder - ARForms plugin <= 1.8.5 - Unauthenticated PHP Object Injection vulnerability
WordPress Contact Form, Survey, Quiz & Popup Form Builder - ARForms plugin = 1.8.5 - Unauthenticated PHP Object Injection vulnerability discovered by Krzysztof Zając - CERT PL in WordPress Plugin ARForms Form Builder versions = 1.8.5...
WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OptionTree versions = 2.7.3...
WordPress Turnkey bbPress by WeaverTheme plugin <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection vulnerability
Authenticated Administrator+ PHP Object Injection vulnerability discovered by Luk6785 in WordPress Plugin Turnkey bbPress versions = 1.7.1...
WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by dutafi in WordPress Plugin RegistrationMagic versions = 6.0.9.7...
WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...
WordPress Podlove Podcast Publisher plugin <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability
Authenticated Contributor+ PHP Object Injection to Arbitrary File Deletion via 'unfurldata' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Podlove Podcast Publisher versions = 4.5.3...
CLSA-2026-1787038633 TuxCare security update for zendframework/zendframework1 (10 CVEs)
TuxCare rebuilt zendframework/zendframework1 to address 10 CVEs. Fixed in 1.11.0-p2+tuxcare...
K000162967: PHP vulnerability CVE-2026-17544
Security Advisory Description Attacker-provided inputs to bccomp could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9. CVE-2026-17544 Impact There is no impact; F5 products are not affected by this vulnerability...
