CVE-2026-54814: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.109...

CVE-2026-49108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

CVE-2026-40757: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Château = 1.2.1 versions...

CVE-2026-40756: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

CVE-2026-40752: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...

CVE-2026-40738: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2026-39560: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

CVE-2026-39556: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

CVE-2026-39445: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-39442: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

CVE-2025-69127: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69111: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...

CVE-2026-54806: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-49107: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

CVE-2026-42380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-40761: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...