112983 matches found
CVE-2026-40756
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40757
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
CVE-2026-39560
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
CVE-2026-39576
Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...
CVE-2025-69127
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
CVE-2025-69130
Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Theme: from n/a before 3.1.5...
CVE-2025-60236 WordPress Creatify theme <= 1.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...
CVE-2026-54814
The CVE identifies a Local File Inclusion in the WordPress plugin Motors by StylemixThemes, affecting versions up to 1.4.109. The root cause is improper control of filename for include/require in PHP , enabling LFI. Affected scope is listed as Motors from n/a through 1.4.109. The CVSS vector (3.1...
CVE-2026-54194
Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...
CVE-2026-49107
Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...
CVE-2026-42380
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-40759
Unauthenticated PHP Object Injection in Esmée = 1.4 versions...
CVE-2026-40761
Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...
CVE-2026-40739
Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...
CVE-2026-40725
Unauthenticated PHP Object Injection in WooCommerce Product Filters 2.0.6 versions...
CVE-2026-40735
Unauthenticated PHP Object Injection in Reina = 2.1 versions...
CVE-2026-39578
Unauthenticated PHP Object Injection in Valiance = 1.2 versions...
CVE-2026-39580
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...