WordPress Doubly plugin <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import vulnerability

Authenticated Subscriber+ PHP Object Injection via ZIP File Import vulnerability discovered by Bartłomiej Bergier bergee in WordPress Plugin Doubly - Cross Domain Copy Paste for WordPress versions = 1.0.46...

CVE-2025-14476

creationtimestamp| type| source ---|---|--- 2025-12-13 11:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7uhqitzvw2c...