CVE-2026-19658

CVE-2026-19658 — Give Tributes 인증되지 않은 PHP 객체 주입 WordPress 애드온 Give - TributesLiquid Web / GiveWP의 CVE-2026-19658에 대한 Python 3 개념 증명 스캐너 및 기부 체인 익스플로잇 도우미 입니다. | ---|--- 플랫폼| WordPress 플러그인 GiveWP 코어 필요 구성 요소| Give - Tributes 영향 받는 버전| ≤ 2.3.1 수정된 버전| 2.3.1.1+ 정제된 다중 수신자 eCard 필드 CVSS| 9.8 심각 인증|...

CVE-2026-19658

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-19658

Give Tributes WordPress plugin (≤ 2.3.1 ) is vulnerable to PHP Object Injection via deserialization of untrusted input in the give_tributes_ecard_notify[recipient][personalized][] parameter, exploitable by unauthenticated attackers. No known POP chain exists within the plugin itself, so impact de...