384139 matches found
CVE-2026-93938: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...
CVE-2026-93937: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...
CVE-2026-93935: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...
CVE-2026-93933: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4...
CVE-2026-93931: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0...
CVE-2026-93930: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0...
CVE-2026-93929: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16...
CVE-2026-93927: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...
CVE-2026-62046: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12...
CVE-2026-62045: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0...
CVE-2026-104398: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10...
CVE-2026-108579: Improper Neutralization of Formula Elements in a CSV File
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
CVE-2026-105885: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-108639: Missing Authorization
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently delete data dictionaries via the deletePhysic handler of SysDictController. Low-privileged attackers can send DELETE requests to /sys/dict/deletePhysic/id to irreversibly remov...
CVE-2026-42419: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...
CVE-2026-62077: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...
CVE-2026-62043: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension = 5.0.7 versions...
CVE-2026-62021: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Angio = 1.1.1 versions...