PT-2026-109900

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw allows authenticated users to permanently delete data dictionaries. Low-privileged attackers can send DELETE requests to the '/sys/dict/deletePhysic/id' endpoint, which trigge...

PT-2026-109821

Name of the Vulnerable Software and Affected Versions Avala versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109842

Name of the Vulnerable Software and Affected Versions Asia Garden versions 1.3.1 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109807

Name of the Vulnerable Software and Affected Versions Stargaze versions 1.10 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109839

Name of the Vulnerable Software and Affected Versions Law Office versions prior to 3.21 Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109863

Name of the Vulnerable Software and Affected Versions Photolia versions prior to 1.0.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109782

Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data. Recommendations Update Dynamic User Directory to a version later than 2.4...

PT-2026-109856

Name of the Vulnerable Software and Affected Versions Kicker versions prior to 2.2.2 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109824

Name of the Vulnerable Software and Affected Versions Equadio versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109805

Name of the Vulnerable Software and Affected Versions Contact Form 7 – Dynamic Text Extension versions prior to 5.0.8 Description An issue exists that allows unauthenticated users to cause sensitive data exposure. Recommendations Update to a version newer than 5.0.7...

PT-2026-109859

Name of the Vulnerable Software and Affected Versions Jacqueline versions 2.22 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109848

Name of the Vulnerable Software and Affected Versions Drone Media versions 2.2.0 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109809

Name of the Vulnerable Software and Affected Versions Wine House versions 3.20 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109779

Name of the Vulnerable Software and Affected Versions Payever - WooCommerce Gateway versions prior to 4.8.3 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...

PT-2026-109763

Name of the Vulnerable Software and Affected Versions Web Plura Backup & Restore Manager versions prior to 0.2.26 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 0.2.25...

PT-2026-109806

Name of the Vulnerable Software and Affected Versions Splendour versions 1.23 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109572

Name of the Vulnerable Software and Affected Versions Gutentype versions prior to 2.1.13 Description Deserialization of untrusted data in the Gutentype plugin allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application to execute arbitrary cod...

PT-2026-109781

Name of the Vulnerable Software and Affected Versions Booster for WooCommerce versions prior to 8.4.1 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...

PT-2026-109576

Name of the Vulnerable Software and Affected Versions Smash versions prior to 1.12.0 Description ThemeREX Group Smash is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by...

PT-2026-109579

Name of the Vulnerable Software and Affected Versions Partiso versions prior to 1.1.14 Description ThemeREX Group Partiso is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application ...