11608 matches found
CVE-2026-62087: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Equadio = 1.1.4 versions...
CVE-2026-62086: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Juno = 2.25 versions...
CVE-2026-66565: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FC United = 1.1.1 versions...
CVE-2026-66482: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Drone Media = 2.2.0 versions...
CVE-2026-66568: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Original = 1.9.0 versions...
CVE-2026-66569: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Kicker = 2.2.1 versions...
CVE-2026-78535: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Photolia = 1.0.3 versions...
PT-2026-109792
Name of the Vulnerable Software and Affected Versions Angio versions prior to 1.1.2 Description PHP Object Injection occurs in the Subscriber component, allowing an attacker to inject malicious objects into the application. Recommendations Update to a version newer than 1.1.1...
PT-2026-109571
Name of the Vulnerable Software and Affected Versions Booklovers versions prior to 2.13.0 Description Deserialization of untrusted data in the Booklovers theme allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting malicious...
PT-2026-109703
Name of the Vulnerable Software and Affected Versions Super Video Player versions prior to 1.8.14 Description Deserialization of untrusted data in the bPlugins Super Video Player plugin allows for Object Injection. This occurs when the application deserializes data from an untrusted source withou...
PT-2026-109582
Name of the Vulnerable Software and Affected Versions Hygia versions prior to 1.21.0 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic...
PT-2026-109583
Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...
PT-2026-109584
Name of the Vulnerable Software and Affected Versions Greeny versions prior to 2.10.1 Description Deserialization of untrusted data in the ThemeREX Group Greeny theme allows for Object Injection. Object Injection occurs when an application deserializes untrusted input, potentially allowing an...
PT-2026-109585
Name of the Vulnerable Software and Affected Versions Edema versions prior to 1.2.2.3 Description Deserialization of untrusted data in the ThemeREX Group Edema theme allows for Object Injection. Object Injection occurs when untrusted input is passed to a deserialization function, potentially...
CVE-2026-12626: Deserialization of Untrusted Data
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...
CVE-2026-105885: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-104723: Deserialization of Untrusted Data
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, ...
CVE-2026-106606: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...