CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-40736: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

CVE-2026-40735: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reina = 2.1 versions...

CVE-2026-40725: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WooCommerce Product Filters 2.0.6 versions...

CVE-2026-39580: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

CVE-2026-39578: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...

CVE-2026-39577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

CVE-2026-39573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...

CVE-2026-39568: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Mr. SEO = 2.0 versions...

CVE-2026-39567: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...

CVE-2026-39554: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-39539: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2026-39446: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

CVE-2026-12256: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...

CVE-2025-69146: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Dom = 1.24 versions...

CVE-2025-69122: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

CVE-2025-69108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

CVE-2025-60205: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1...