CVE-2026-16297

The CVE concerns the Clearfy Cache WordPress plugin prior to version 2.4.3. The vulnerability arises because the plugin does not restrict the classes allowed during unserialization of settings-import data, enabling an attacker with administrator access to induce PHP Object Injection. This can lea...