Lucene search
+L

10975 matches found

Patchstack
Patchstack
•added 2026/08/06 12:49 p.m.•11 views

WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Adrena versions = 1.2.14...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•12 views

WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Accalia versions = 1.5.3...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•15 views

WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•12 views

WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Abelle versions = 1.22...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:41 p.m.•16 views

WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme A.Williams versions = 1.3.1...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:41 p.m.•14 views

WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme 69 Clothing versions = 1.2.11.1...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 8:17 a.m.•14 views

WordPress ChamaWP plugin < 1.0.13 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin ChamaWP versions 1.0.13...

8.1CVSS5.5AI score0.00646EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•7 views

CVE-2026-28139: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•4 views

CVE-2026-65571: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•6 views

PT-2026-68569

Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•8 views

CVE-2026-65579: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•3 views

CVE-2026-65575: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•7 views

PT-2026-68563

Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•5 views

PT-2026-68567

Name of the Vulnerable Software and Affected Versions Agora versions prior to 2.0 Description The Agora Event & Conference WordPress Theme is susceptible to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no P...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•9 views

PT-2026-68568

Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•6 views

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

9.8CVSS6.3AI score0.00564EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•3 views

CVE-2026-65581: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•5 views

CVE-2026-65574: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•2 views

CVE-2026-65578: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•2 views

CVE-2026-65573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rows per page
Query Builder