PT-2026-109807

Name of the Vulnerable Software and Affected Versions Stargaze versions 1.10 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109839

Name of the Vulnerable Software and Affected Versions Law Office versions prior to 3.21 Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109863

Name of the Vulnerable Software and Affected Versions Photolia versions prior to 1.0.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109782

Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data. Recommendations Update Dynamic User Directory to a version later than 2.4...

PT-2026-109856

Name of the Vulnerable Software and Affected Versions Kicker versions prior to 2.2.2 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109824

Name of the Vulnerable Software and Affected Versions Equadio versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109805

Name of the Vulnerable Software and Affected Versions Contact Form 7 – Dynamic Text Extension versions prior to 5.0.8 Description An issue exists that allows unauthenticated users to cause sensitive data exposure. Recommendations Update to a version newer than 5.0.7...

PT-2026-109859

Name of the Vulnerable Software and Affected Versions Jacqueline versions 2.22 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109854

Name of the Vulnerable Software and Affected Versions Anesta versions prior to 1.5.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109850

Name of the Vulnerable Software and Affected Versions Windsor versions 2.10 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109848

Name of the Vulnerable Software and Affected Versions Drone Media versions 2.2.0 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109809

Name of the Vulnerable Software and Affected Versions Wine House versions 3.20 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109583

Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...

PT-2026-109779

Name of the Vulnerable Software and Affected Versions Payever - WooCommerce Gateway versions prior to 4.8.3 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...

CVE-2026-106606: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

PT-2026-109763

Name of the Vulnerable Software and Affected Versions Web Plura Backup & Restore Manager versions prior to 0.2.26 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 0.2.25...

PT-2026-109806

Name of the Vulnerable Software and Affected Versions Splendour versions 1.23 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

CVE-2026-93931: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0...

CVE-2026-78529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alliance = 3.11 versions...

CVE-2026-93942: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0...