CVE-2026-104738

The Advanced Form Integration WordPress plugin (versions up to and including 2.10.2 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted ** extsubscript{_}POST** parameters. This flaw allows unauthenticated attackers to inject a PHP Object, though it requires at least o...