10996 matches found
WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Advice versions = 1.18.0...
WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Adrena versions = 1.2.14...
WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Accalia versions = 1.5.3...
WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Abelle versions = 1.22...
WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme A.Williams versions = 1.3.1...
WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme 69 Clothing versions = 1.2.11.1...
WordPress ChamaWP plugin < 1.0.13 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin ChamaWP versions 1.0.13...
CVE-2026-28139: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...
CVE-2026-65571: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...
PT-2026-68569
Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...
CVE-2026-65579: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65575: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
PT-2026-68563
Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...
PT-2026-68567
Name of the Vulnerable Software and Affected Versions Agora versions prior to 2.0 Description The Agora Event & Conference WordPress Theme is susceptible to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no P...
PT-2026-68568
Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...
PT-2026-68560
Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...