11608 matches found
CVE-2026-66563: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Windsor = 2.10 versions...
CVE-2026-78529: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Alliance = 3.11 versions...
PT-2026-109572
Name of the Vulnerable Software and Affected Versions Gutentype versions prior to 2.1.13 Description Deserialization of untrusted data in the Gutentype plugin allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application to execute arbitrary cod...
PT-2026-109581
Name of the Vulnerable Software and Affected Versions IPharm versions prior to 1.2.5 Description ThemeREX Group IPharm ipharm contains a deserialization of untrusted data flaw that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by...
PT-2026-109588
Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...
PT-2026-109589
Name of the Vulnerable Software and Affected Versions Axiomthemes Balance versions prior to 1.12.1 Description The Axiomthemes Balance WordPress theme contains a flaw where it deserializes untrusted user-controlled data using the unserialize function. This allows for PHP object injection, where...
PT-2026-109576
Name of the Vulnerable Software and Affected Versions Smash versions prior to 1.12.0 Description ThemeREX Group Smash is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by...
PT-2026-109573
Name of the Vulnerable Software and Affected Versions Veto versions prior to 1.6.0 Description Deserialization of untrusted data in Veto allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic...
PT-2026-109574
Name of the Vulnerable Software and Affected Versions Travesia versions prior to 1.1.17 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application...
PT-2026-109575
Name of the Vulnerable Software and Affected Versions Tantra versions prior to 2.9.0 Description The software contains a deserialization of untrusted data issue that allows Object Injection. This occurs when the application processes maliciously crafted serialized data, enabling an attacker to...
PT-2026-109577
Name of the Vulnerable Software and Affected Versions Smart Casa versions prior to 1.0.13 Description ThemeREX Group Smart Casa is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an...
PT-2026-109578
Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4...
PT-2026-109579
Name of the Vulnerable Software and Affected Versions Partiso versions prior to 1.1.14 Description ThemeREX Group Partiso is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application ...
PT-2026-109580
Name of the Vulnerable Software and Affected Versions Let's Play versions prior to 1.1.16 Description Deserialization of untrusted data in the playhockey component allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting...
CVE-2026-93942: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0...
CVE-2026-93936: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...
CVE-2026-93929: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16...
CVE-2026-62090: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WineShop = 3.20 versions...