PT-2026-109839

Name of the Vulnerable Software and Affected Versions Law Office versions prior to 3.21 Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109577

Name of the Vulnerable Software and Affected Versions Smart Casa versions prior to 1.0.13 Description ThemeREX Group Smart Casa is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an...

PT-2026-109863

Name of the Vulnerable Software and Affected Versions Photolia versions prior to 1.0.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109782

Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data. Recommendations Update Dynamic User Directory to a version later than 2.4...

PT-2026-109856

Name of the Vulnerable Software and Affected Versions Kicker versions prior to 2.2.2 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109824

Name of the Vulnerable Software and Affected Versions Equadio versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109805

Name of the Vulnerable Software and Affected Versions Contact Form 7 – Dynamic Text Extension versions prior to 5.0.8 Description An issue exists that allows unauthenticated users to cause sensitive data exposure. Recommendations Update to a version newer than 5.0.7...

PT-2026-109859

Name of the Vulnerable Software and Affected Versions Jacqueline versions 2.22 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109579

Name of the Vulnerable Software and Affected Versions Partiso versions prior to 1.1.14 Description ThemeREX Group Partiso is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application ...

PT-2026-109854

Name of the Vulnerable Software and Affected Versions Anesta versions prior to 1.5.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109850

Name of the Vulnerable Software and Affected Versions Windsor versions 2.10 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109848

Name of the Vulnerable Software and Affected Versions Drone Media versions 2.2.0 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109809

Name of the Vulnerable Software and Affected Versions Wine House versions 3.20 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109578

Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4...

PT-2026-109583

Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...

PT-2026-109571

Name of the Vulnerable Software and Affected Versions Booklovers versions prior to 2.13.0 Description Deserialization of untrusted data in the Booklovers theme allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting malicious...

PT-2026-109875

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the exportXls handler within the AiragExtDataController. This issue allows any authenticated user, including those with low privileges, to export AI evaluator data. ...

CVE-2026-62046: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12...

CVE-2026-78535: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Photolia = 1.0.3 versions...

PT-2026-109584

Name of the Vulnerable Software and Affected Versions Greeny versions prior to 2.10.1 Description Deserialization of untrusted data in the ThemeREX Group Greeny theme allows for Object Injection. Object Injection occurs when an application deserializes untrusted input, potentially allowing an...