CVE-2026-54194

CVE-2026-54194 concerns the WordPress Fusion Builder plugin, affected versions ≤ 3.15.4, with a PHP Object Injection vulnerability identified in the CVE record. The provided information confirms the affected component (Fusion Builder), the vulnerable version range, and the nature of the issue (PH...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

PT-2026-50115

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

PT-2026-50111

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

PT-2026-50085

Contributor PHP Object Injection in Avada = 3.15.3 versions...

PT-2026-50107

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...

PT-2026-50116

Unauthenticated PHP Object Injection in Esmée = 1.4 versions...

PT-2026-50081

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

PT-2026-50112

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

PT-2026-50103

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

PT-2026-50098

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

PT-2026-50097

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

PT-2026-50106

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

PT-2026-50094

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

PT-2026-50118

Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...

PT-2026-50108

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

PT-2026-50104

Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...

PT-2026-50095

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

PT-2026-50102

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

PT-2026-50088

Name of the Vulnerable Software and Affected Versions Nifty versions 1.4.1 and earlier Description Unauthenticated PHP Object Injection allows an attacker to inject malicious objects into the application. PHP Object Injection occurs when user-supplied input is passed to the unserialize function...