WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hallelujah versions = 1.1.1...

WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Vagabonds versions = 1.3.10...

WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Reprizo versions = 1.0.8...

WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Rhodos versions = 1.3.3...

WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Little Birdies versions = 1.3.16...

WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Redy versions = 1.3.5...

CVE-2026-110370

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2024-56059

CVE-2024-56059 Partners = 0.2.0 - Unauthenticated PHP Object Injection Description The Partners plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.0 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-107158

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110370

The GS Pins for Pinterest WordPress plugin (versions

CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

EUVD-2026-107157

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110369

The WordPress Team Members – GS Plugins (gs-team-members) plugin is vulnerable to a PHP Object Injection flaw in versions

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

WordPress Duplicator Pro plugin <= 4.6.10 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Duplicator Pro versions = 4.6.10...

WordPress Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More plugin <= 1.5.17 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Duplicator versions = 1.5.17...