384181 matches found
PT-2026-109855
Name of the Vulnerable Software and Affected Versions Original versions prior to 1.9.1 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109762
Name of the Vulnerable Software and Affected Versions Swish Migrate and Backup versions prior to 1.4.1 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 1.4.0...
PT-2026-109585
Name of the Vulnerable Software and Affected Versions Edema versions prior to 1.2.2.3 Description Deserialization of untrusted data in the ThemeREX Group Edema theme allows for Object Injection. Object Injection occurs when untrusted input is passed to a deserialization function, potentially...
PT-2026-109852
Name of the Vulnerable Software and Affected Versions FC United versions prior to 1.1.2 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109808
Name of the Vulnerable Software and Affected Versions Tipsy versions 1.6 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109841
Name of the Vulnerable Software and Affected Versions N7 | Golf Club Sports & Events versions prior to 2.21 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...
PT-2026-109703
Name of the Vulnerable Software and Affected Versions Super Video Player versions prior to 1.8.14 Description Deserialization of untrusted data in the bPlugins Super Video Player plugin allows for Object Injection. This occurs when the application deserializes data from an untrusted source withou...
PT-2026-109784
Name of the Vulnerable Software and Affected Versions CleanSkin versions 1.5.0 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109849
Name of the Vulnerable Software and Affected Versions Education Center versions prior to 3.6.13 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109825
Name of the Vulnerable Software and Affected Versions WineShop versions 3.20 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109930
Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...
PT-2026-109779
Name of the Vulnerable Software and Affected Versions Payever - WooCommerce Gateway versions prior to 4.8.3 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...
CVE-2026-106606: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...
PT-2026-109763
Name of the Vulnerable Software and Affected Versions Web Plura Backup & Restore Manager versions prior to 0.2.26 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 0.2.25...
CVE-2026-42630: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...
PT-2026-109806
Name of the Vulnerable Software and Affected Versions Splendour versions 1.23 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
CVE-2026-93931: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0...
PT-2026-109574
Name of the Vulnerable Software and Affected Versions Travesia versions prior to 1.1.17 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application...