WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WordPress Team Members – GS Plugins versions = 2.8.2...

WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GS Pins for Pinterest versions = 1.9.2...

CVE-2026-111408: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-110886

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...

CVE-2026-107436

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107436 WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

EUVD-2026-103433

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107436

The WP Chill Strong Testimonials WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This issue affects versions from n/a through 3.3.12 . An attacker could exploit this to perform Object Injection , potentially impacting the confidentiality, inte...

CVE-2026-110886 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...

CVE-2026-110886

The QuantumCloud Conversational Forms for ChatBot WordPress plugin (versions up to and including 1.5.1 ) is vulnerable to a PHP Object Injection flaw. This vulnerability arises from the deserialization of untrusted data , allowing an attacker to inject objects into the application. The vulnerabil...

EUVD-2026-103430

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...

PT-2026-116586

CVE-2026-107436 CVSS 8.8: Deserialization vulnerability in Strong Testimonials plugin WP Chill through v3.3.12. WordPress sites should check for updates. https://t.co/NKfc4BIlfd… via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability AI MachineLearning https://t.co/q59xLTIjlq...

CVE-2026-110886: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...

CVE-2026-107436: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ihsan Saddan in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

CVE-2026-81344

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given ...

EUVD-2026-103259

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given ...

CVE-2026-81344 Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given ...

CVE-2026-81344

The ACF Frontend Admin by DynamiApps WordPress plugin, in versions up to and including 3.29.13 , is vulnerable to PHP Object Injection . The root cause is a lack of restriction on which PHP classes can be instantiated during the deserialization of stored post content rendered on public-facing pag...

CVE-2026-81344 Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given ...