PT-2026-50359

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

PT-2026-50398

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

PT-2026-50404

Name of the Vulnerable Software and Affected Versions ShiftUp versions 1.3 and earlier Description An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the unserialize function without proper validation, potentiall...

CVE-2026-49108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

CVE-2026-40756: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

CVE-2026-39445: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2025-69127: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69111: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...

CVE-2025-60229: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...

CVE-2026-54806: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-49107: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

CVE-2026-42380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-40755: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in TechLink = 1.3 versions...

CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-40736: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

CVE-2026-39557: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2026-39446: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

CVE-2026-39443: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...