Lucene search
+L

8493 matches found

Patchstack
Patchstack
added 2026/02/23 10:20 a.m.12 views

WordPress Kingler theme <= 1.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Kingler versions = 1.7...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/02/23 10:20 a.m.9 views

WordPress Dentario theme <= 1.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Dentario versions = 1.5...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2026/02/23 12:00 a.m.210 views

📄 jsPDF PDF Object Injection

jsPDF versions prior to 4.2.0 suffer from a PDF object injection vulnerability the addJS method. CVE-2026-25755: PDF Object Injection in jsPDF addJS Method Description A PDF Object Injection vulnerability was identified in the addJS method of jsPDF. The library fails to sanitize user-supplied inp...

8.8CVSS5.6AI score0.00834EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.10 views

CVE-2026-24892

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries. Serialized changelog data derived fro...

8.8CVSS6.2AI score0.00813EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.15 views

CVE-2025-69294

Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through = 1.5.9...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.17 views

CVE-2025-69371

Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through = 1.6.1...

9.8CVSS5.5AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.13 views

CVE-2025-69328

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.5.9...

8.8CVSS5.5AI score0.00344EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.9 views

CVE-2025-69382

Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through = 1.0.1...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.9 views

CVE-2025-69405

Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum | Books & Media Store: from n/a through = 1.2.11...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.11 views

CVE-2025-69329

Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through 1.4.1...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.11 views

CVE-2025-69370

Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.10 views

CVE-2025-69372

Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through = 1.6.2...

9.8CVSS5.5AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-69404

Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through = 1.5.10...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.10 views

CVE-2025-69301

Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through = 5.6.11...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-67997

Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through 1.6.7...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.10 views

CVE-2025-67995

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

9.8CVSS5.5AI score0.0051EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.10 views

CVE-2025-67996

Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through 1.2.6...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS5.5AI score0.0033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.13 views

CVE-2025-68541

Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through = 1.2.0...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.14 views

CVE-2025-68526

Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through = 1.6.1...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0References1
Rows per page
Query Builder