Lucene search
K

8045 matches found

Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.11 views

PT-2026-46047

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.2 Description PHP Object Injection occurs due to the use of unserialize calls within the Workflow, Form block, and File/Set components that do not implement the allowed classes restriction. This allows an...

8.4CVSS5.9AI score0.00175EPSS
Exploits0References3
NVD
NVD
added 2026/06/02 2:16 p.m.16 views

CVE-2026-39555

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS0.00255EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 1:34 p.m.7 views

CVE-2026-39555

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS5.8AI score0.00255EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/02 1:34 p.m.11 views

EUVD-2026-33924

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS5.8AI score0.00255EPSS
Exploits0References1
CVE
CVE
added 2026/06/02 1:34 p.m.13 views

CVE-2026-39555

The CVE-2026-39555 entry concerns the WordPress Askka theme (versions up to 1.3.1). The vulnerability is a PHP Object Injection via a deserialization of untrusted data in the Askka plugin/theme, allowing object injection. Affected component: WordPress Askka theme

8.1CVSS5.8AI score0.00255EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 1:34 p.m.8 views

CVE-2026-39555 WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS5.8AI score0.00255EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/02 1:34 p.m.40 views

CVE-2026-39555 WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS0.00255EPSS
Exploits0References1
NVD
NVD
added 2026/06/02 12:16 p.m.11 views

CVE-2026-39551

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2026/06/02 12:16 p.m.11 views

CVE-2026-39550

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS0.00308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 10:46 a.m.8 views

CVE-2026-39551 WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 10:46 a.m.8 views

CVE-2026-39551

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References2
CVE
CVE
added 2026/06/02 10:46 a.m.15 views

CVE-2026-39551

The CVE-2026-39551 entry concerns the WordPress Töbel theme (versions &lt;= 1.8.1) with a PHP Object Injection /deserialization vulnerability in Töbel. Affected component: Töbel theme; root cause: deserialization of untrusted data enabling object injection. Impact metrics from Patchstack indicate...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/02 10:46 a.m.14 views

EUVD-2026-33912

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/02 10:46 a.m.36 views

CVE-2026-39551 WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS0.00308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 10:44 a.m.8 views

CVE-2026-39550 WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/02 10:44 a.m.7 views

EUVD-2026-33911

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
CVE
CVE
added 2026/06/02 10:44 a.m.12 views

CVE-2026-39550

CVE-2026-39550 affects the WordPress Aperitif theme (versions up to 1.6). The issue is a PHP Object Injection caused by deserialization of untrusted data in Aperitif, enabling exploitation via a network vector with no user interaction and no privileges required. The CVSSv3.1 base score is 8.1 (HI...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/02 10:44 a.m.33 views

CVE-2026-39550 WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS0.00308EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 10:44 a.m.10 views

CVE-2026-39550

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00308EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.4 views

WordPress plugin Töbel 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

8.1CVSS5.5AI score0.00308EPSS
Exploits0References1
Rows per page
Query Builder